Connecting to Microsoft Dynamics AX

EmpowerID Dynamics AX connector allows organizations to bring the user data in their Dynamics AX system to EmpowerID, where it can be managed and synchronized with data in any connected back-end user directories. Once connected, you can manage this data from EmpowerID in the following ways:

  • Provision new users

  • Edit user attributes

  • Delete users

Additionally, EmpowerID provides Provisioning policies or Resource Entitlements (RETs) that allow you to automatically provision DAX accounts for any person within your organization based on your policy requirements. For more information on RETs and DAX, see Creating a Provisioning Policy for Microsoft Dynamics Users.

Prerequisites

In order to connect EmpowerID to Dynamics AX, you need to have a Dynamics AX server with the Dynamics AX client installed. In addition, you need to have the installer for the EmpowerID Dynamics AX Web services. This installer is a separate package that needs to be requested from EmpowerID.

 

This topic demonstrates how to connect EmpowerID to Microsoft Dynamics AX and is divided into the following activities:

  • Installing the EmpowerID Dynamics AX Web Services

  • Connecting EmpowerID to your Dynamics AX User directory

  • Configuring the Dynamics AX Account Store in EmpowerID

  • Connecting EmpowerID to your Dynamics AX Worker directory

Install the EmpowerID Dynamics AX Web Service

  1. On your Dynamics AX server, double-click the Dynamics AX WebServices X.X.X.X msi to launch the EmpowerID Dynamics AX Services Setup wizard.

  2. Click Next to begin the installation.

     

  3. Select the terms of the license agreement and click Next.

  4. Select the destination folder and click Next.

  5. Click Install.


    EmpowerID installs the service and opens the EmpowerID DAX Configuration window. You use this window to set the application identity and installation configuration information needed by EmpowerID to communicate with the service.

     

  6. In the Application Identity pane of the EmpowerID DAX Configuration window, do the following:

    1. Type the user name and password of the service identity in the Username and Password fields, respectively. These credentials need to be those of a DAX administrator with read and write permissions to the DAX database.

    2. Select the Web site for the service from the Web Site drop-down. You can keep the default selection or choose another.

    3. Leave the Application field as is.

  7. In the Dyanamics AX Installation Configuration pane of the EmpowerID DAX Configuration window, do the following:

    1. Click the Ellipses (...) for the Business Connector dll field, browse to the bin folder of your Dynamics AX installation (located by default at "C:\Program Files (x86)\Microsoft Dynamics AX\60\Client\Bin") and select BusinessConnectorNet.dll DLL.

    2. Click the Ellipses (...) for the Dynamics Utility dll field, browse to the bin folder of your Dynamics AX installation (located by default at "C:\Program Files (x86)\Microsoft Dynamics AX\60\Client\Bin") and select AXUtilLib.dll.

    3. Click the Ellipses (...) for the Dynamics Powershell dll field, browse to the bin folder of your Dynamics AX installation (located by default at "C:\Program Files (x86)\Microsoft Dynamics AX\60\Client\Bin") and select AXUtilLib.Powershell.dll.

    4. Click the Ellipses (...) for the Dynamics Administration dll field, browse to the bin folder of your Dynamics AX installation (located by default at "C:\Program Files (x86)\Microsoft Dynamics AX\60\Client\Bin") and select Microsoft.Dynamics.Administration.dll.

    5. Click the Ellipses (...) for the Dynamics Management dll field, browse to the bin folder of your Dynamics AX installation (located by default at "C:\Program Files (x86)\Microsoft Dynamics AX\60\Client\Bin") and select Microsoft.Dynamics.AX.Framework.Management.dll.

      After completing the above steps, the EmpowerID DAX Configuration window should look similar to the below image.

       

  8. Click Apply and then click Ok to close the window.

After installing the Web service, make note of the service URL. You will need this URL when connecting EmpowerID to your Dynamics AX directories. The default URL is https://YourServerName/EmpowerIDDAX/DAXUserService.svc, where YourServerName is the FQDN of your Dynamics server.

Create an account store for your Dynamics AX User directory

  1. On the navbar, expand Admin, then Applications and Directories, and click Account Stores and Systems.

  2. On the Account Stores page, click Create Account Store.

     

  3. Search for Dynamics AX User from the list of system types.

  4. Click the record returned for the above query and then click Submit.

     

  5. On the DAX User form that appears, enter the following information:

    • Name — Enter a name for the account store

    • ServiceURL — Enter the URL for the EmpowerID DAX Web service you installed above. The URL should look similar to: https://YourServerName/EmpowerIDDAX/DAXUserService.svc, where YourServerName is the FQDN of your Dynamics server.

  6. Click Submit to create the account store.

     

  7. EmpowerID creates the account store and the associated resource system. The next step is to configure the attribute flow between the account store and EmpowerID.

Now that the attribute flow has been set, the next steps include configuring the account store and enabling EmpowerID to inventory it.

Configure account store settings

  1. On the Account Store and Resource System page, click the Account Store tab and then click the pencil icon to put the account store in edit mode.


    This opens the edit page for the Dynamics User account store. This page allows you to specify the account proxy used to connect EmpowerID to your Dynamics User system as well as how you want EmpowerID to handle the user information it discovers there during inventory. Settings that can be edited are described in the table below the image.

  2. Edit the account store as needed and then click Save to save your changes.

Next, enable the Account Inbox permanent workflow to allow the Account Inbox to provision or join the user accounts in Domino to EmpowerID Persons as demonstrated below.