Product DocsMenu

Configuring a Microsoft Dynamics CRM Security Provider

CES 7.0.7599+ (April 2015)

The Microsoft Dynamics CRM connector needs a security provider to manage the user permissions on Microsoft Dynamics CRM entities. The Microsoft Dynamics CRM security provider performs tasks such as expanding groups to users and mapping Microsoft Dynamics CRM users to emails or to Active Directory users. The connector creates and sets several virtual groups on indexed documents to support the access policies defined in Microsoft Dynamics CRM.

Note: You can get familiar with how Coveo components deal with permissions on documents both at indexing and query time (see Security) .

To Configure a Microsoft Dynamics CRM security provider

  1. On the Coveo server, access the Administration Tool (see Opening the Administration Tool).

  2. Select Configuration > Security.

  3. In the Security page, in the navigation panel on the left, click Security Providers.

  4. In the Security Providers page, click Add to create a new security provider.

  5. In the Modify Security Provider page:

    1. In the Name box, enter a name to identify this security provider.

      Example: Microsoft Dynamics CRM Security Provider

    2. In the Security Provider Type drop-down list, select Microsoft Dynamics CRM.

      Note: If you do not see Microsoft Dynamics CRM in the Security Provider Type list, your environment does not meet the requirements (see Microsoft Dynamics CRM Connector Requirements).

    3. In the User Identity section:

      1. In the drop-down list, select the user identity that you created previously with the Microsoft Dynamics CRM crawling account credentials (see Microsoft Dynamics CRM Connector Deployment Overview).

      2. When needed, click Add, Edit, or Manage user identities respectively to create, modify, or manage user identities.

    4. In the Organization unique name box, enter the same unique name of the organization you previously entered (see Using the Microsoft Dynamics CRM Connector Configuration Generator Tool).

    5. In the Discovery server URL box, enter the root address of your Microsoft Dynamics CRM organization.

      • For an on-premises setup (CRM 2013-2015 On-Premises), enter the Discovery Service hosted on the server. You can find this URL in your Microsoft Dynamic CRM system using the Configuration generator tool (see Using the Microsoft Dynamics CRM Connector Configuration Generator Tool).

        Note: You only need to put the URL of the server, the connector will add /XRMServices/2011/Discovery.svc to the starting address.

        Example: When your Discovery Service URL is http://MyDynamicsServer/XRMServices/2011/Discovery.svc, enter http://MyDynamicsServer in the Addresses box.

      • For an online setup (CRM Online), enter the correct server depending on your location (see Discover the URL for your organization with IDiscoveryService web service).

        Example: When your Organization is hosted in North-America, enter

      Note: When you want to index more than one Microsoft Dynamics CRM server or more than one organization, the best practice is to enter only one address here, for one server/organization and create other sources for other server/organizations.

    6. In the Security Provider drop-down list, for a Microsoft Dynamics CRM On-Premises organization, select Active Directory or a custom Active Directory security provider that you created for your specific domain (see Configuring an Active Directory Security Provider).


      • Users in your Microsoft Dynamics CRM On-Premises organization must match the users in your Active Directory.

      • For a Microsoft Dynamics CRM Online organization, contact Coveo Professional Services to configure a customized security provider for your setup.

    7. Leave the Allow Complex Identities option cleared as it does not apply to this type of security provider.

    8. Click Apply Changes.

What's Next?

Configure and index your Microsoft Dynamics CRM source (see Configuring and Indexing a Microsoft Dynamics CRM Source).

People who viewed this topic also viewed