Page 1 of 17812345678910...2025303540...Last »

You receive "You are not allowed to use Microsoft Dynamics GP. Please sign out and sign in with an authorized account" when accessing Web…

One of the cool things about Microsoft Dynamics GP 2015 is the new Web Client Identity Management feature. Having the ability to access Microsoft Dynamics GP with your Windows Directory or Windows Azure credentials without ever needing a SQL login account is just beautiful.

The Theory – Part 1: GP Utilities

The theory is fairly simple: you have a Microsoft Dynamics GP user account, which in turn is tied to a Windows Active Directory account or Windows Azure Active Directory account. User accounts are stored in the User Master table (dbo.SY01400) in the system database, which has been beefed up with a new column called Active Directory Object GUID (ADObjectGuid) to store the actual GUID of the directory or organizational account mapped to the GP user.

User Setup window

However, because Microsoft Dynamics GP continues to be dependent on SQL authentication for all intends and purposes, it continues to need a SQL login to be able to access the Dynamics GP database objects. This is where the new Web Client SQL Login user comes into play.

If you have done a new install of Microsoft Dynamics GP 2015, you would have noticed a new window called Manage Web Client SQL Server Login during the GP Utilities process. This window prompts for SQL credentials that will be used to access the SQL server database objects from Web Client.

Manage Web Client SQL Server Login window (GP Utilities)

If you are doing an upgrade, you will need to direct your attention to the drop-down list in the Additional Tasks window to find it — more on this later.

Additional Tasks window (GP Utilities)

When you enter the credentials in the Manage Web Client SQL Server Login window, the actual SQL Server security principal is created with the same password encryption at the database level. To understand more about this, read Why does Microsoft Dynamics GP encrypt passwords by David Musgrave over at Developing for Dynamics GP.

The Theory – Part 2: Web Client

When you are installing the Web Client itself, you are once again prompted to enter the Web Client SQL Server Login credentials. At this stage you MUST enter the same account information entered when you ran the GP Utilities.

This information is stored in the TenantConfiguration.xml file (in a single-machine instance) under the SessionCentral folder. The same information is used by the Service Based Architecture service (GPService service) to gain access to database resources, hence there’s also a TenantConfiguration.xml file (again, in a single-machine instance) under the GPService folder. These two folders can be located under your Program FilesMicrosoft DynamicsGP Web Components root folder.

Now that your AD or Organizational account is tied to your GP user account, when you launch the web client and your AD credentials are validated against IIS, a security token is created and passed on to Session Central service, which in turn spins up a runtime process passing on your AD account credentials in the GP Login window. The log in process itself will use the Web Client SQL Server login to access the system database and in particular the User Master table to validate the AD account GUID against the one stored in the table. If all matches, you are allowed access and from there on you go about your business.

The Problem

This brings us to the topic of this post…

As it turns out, during that handshake between Session Central and the Runtime service to pass off the AD credentials, I received the following error:

Further review of the Dynamics application and services log in Event Viewer, shows the following error:

System.Security.Cryptography.CryptographicException: Padding is invalid and cannot be removed.
   at System.Security.Cryptography.CapiSymmetricAlgorithm.DepadBlock(Byte[] block, Int32 offset, Int32 count)
   at System.Security.Cryptography.CapiSymmetricAlgorithm.TransformFinalBlock(Byte[] inputBuffer, Int32 inputOffset, Int32 inputCount)
   at System.Security.Cryptography.CryptoStream.FlushFinalBlock()
   at System.Security.Cryptography.CryptoStream.Dispose(Boolean disposing)
   at System.IO.Stream.Close()
   at Microsoft.Dynamics.GP.Web.Foundation.AesCryptographer.Decrypt(String value)
   at Microsoft.Dynamics.GP.Web.Services.Session.TenantServiceXmlHandler.ResolveTenantPasswords(Tenant tenant)
   at Microsoft.Dynamics.GP.Web.Services.Session.TenantServiceXmlHandler.GetTenantDetails(String identity, String tenantName)
   at Microsoft.Dynamics.GP.Web.Services.Session.Service.SessionCentralService.CreateSession(String tenantName, UserContext userContext)

Typically, any Crypto exception is directly related to credentials. So I traced back my steps after the upgrade and realized I had created the Web Client SQL server login account manually — after all, I had not seen the option in the GP Utilities drop down to do so. Of course, this would mean that the password was un-encrypted on SQL server and wouldn’t match the password stored in the TenantConfiguration.xml file. In retrospect, had I even used GP Utilities to setup the account and entered a different password from the one I entered during the Web Client install, I would have received the same error.

The Solution

Knowing that in essence what I had was a password mismatch between the value stored in TenantConfiguration.xml and the password at the SQL Server level, I decided to make things simple and removed the database user (sp_dropuser) corresponding to the security principal and the actual security principal (sp_droplogin) then re-launched GP Utilities and created the account once more, this time making sure the password matched what I had entered when installing the Web Client.

Once I launched the Web Client and entered my Windows credentials information, I was able to experience the beauty of single sign-on all the way to the company database I had selected as my default company.

Also, it is worthwhile to mention that Service Based Architecture was failing validation, but I will address this in my next article.

Acknowledgements

I want to thank Chris Rudolph with the Microsoft Dynamics GP Software Engineering team for his valuable insight into working through this issue. Chris also helped me with understanding some deep architecture stuff that I will be presenting in a future related article to this one.

Until next post!

MG.-
Mariano Gomez, MVP
Intelligent Partnerships, LLC
http://www.intelligentpartnerships.com/

Read More:
You receive "You are not allowed to use Microsoft Dynamics GP. Please sign out and sign in with an authorized account" when accessing Web…

March 12, 2015 · Mariano Gomez · No Comments
Tags: , , , , , , , ,  · Posted in: Blogs I Follow Total Views: 30

Chance to Fix a Bad Name

David Musgrave has just announced that he has completed the exclusive agreement with Microsoft to obtain the Support Debugging Tool source code.

He’s now looking at community feedback to fix the horrible name which always took a few tries to explain to people. “Why do I need a debugging tool ?” – most people I recommended the tool to asked me.

Go Vote for a new name that makes sense here – Where is the Support Debugging Tool for Microsoft Dynamics GP 2015?

PS – It was a good thing the tool was named the support debugging tool. With a slightly better name, and consequently even more popularity David would have had much more difficulty getting the source code !

More here:
Chance to Fix a Bad Name

March 11, 2015 · Jivtesh Singh · No Comments
Tags: , , , , , , , ,  · Posted in: Blogs I Follow Total Views: 16

Considering an Upgrade from Dynamics GP to Dynamics AX?


Recently I’ve delivered Dynamics GP training to new users who came from a company using Dynamics AX.  In my own experience, other than the additional features that Dynamics AX offers over Dynamics GP (which are considerable) and getting accustomed to the ability to post a transaction initiated in the General Ledger backto a subsidiary module in AX, there is a lot of commonality in the User Interface (UI) between the two applications.  This is particularly important for companies that have perhaps outgrown Dynamics GP and are considering a move to a more full-featured ERP system such as AX.  Microsoft has done a commendable job of unifying their ERP system UI’s, which offers the client the benefit of quicker and easier user adoption when moving from one application to another.
Additionally, both applications are tightly integrated with Microsoft Office tools, further easing the transition to a new system.
The first image below is of the Dynamics GP 2015 Financial module, with the menu items arranged in basically the same sequence as the Dynamics AX 2012 R3 image below it.  Notice how the menus and the Navigation Pane layout are quite similar in both applications, albeit the AX UI is cleaner, in my opinion.  Maybe the GP development team can get together with the AX dev team on that one.
Based on their comments, my recent trainees report the same experience.  They’ve indicated that adapting to Dynamics GP from AX has been much quicker than they thought it would be, primarily because of the similarities between the two UI’s. 
 
In considering an upgrade from Dynamics GP to Dynamics AX, user adoption and performance ramp-up can be relegated to the bottom of the list of concerns.

More:
Considering an Upgrade from Dynamics GP to Dynamics AX?

March 3, 2015 · Frank Hamelly MCP-GP MCT MVP · No Comments
Tags: , , , , , , , , , ,  · Posted in: Blogs I Follow Total Views: 25

Tech Tuesday: Using PowerShell to Create SmartConnect Event Log

This week’s Tech Tuesday is from our Support Guru, Pat Roth on SmartConnect: 
In this column, we are going to use PowerShell to resolve a couple of issues I’ve seen. The first one is an error you may get when running an integration. The error is: [The source was not found, but some or all event logs could not be searched. Inaccessible logs: Security.] The background for this error is that when

Read the article:
Tech Tuesday: Using PowerShell to Create SmartConnect Event Log

February 24, 2015 · Frank Hamelly MCP-GP MCT MVP · No Comments
Tags: , , , , , , , , ,  · Posted in: Blogs I Follow Total Views: 31

Light it Up Challenge–Microsoft Australia

If like me, you think Internet of Things is the next big thing, here is a fun little event by Microsoft around it.

Code it. Light it. Win it!

All you have to do is sign up to receive the Challenge Kit, and complete all three challenges.
Tune into Microsoft’s six week lab series and discover how to program your device.
If your LED device is one of 5 to light up on April 13 2015, then you’ve won.
During the challenge, you’ll learn how to code, build and deploy with the Internet of Things.
We’ll give you an IoT overview, explain the architecture and MS platform.
Get started today!
*Terms and conditions apply: http://aka.ms/lightitup

See more here – Internet of Things – Light it Up Challenge

Follow this link:
Light it Up Challenge–Microsoft Australia

February 24, 2015 · Jivtesh Singh · No Comments
Tags: , , , , , , , , , ,  · Posted in: Blogs I Follow Total Views: 27

Setting up Dynamics GP 2015 in 15 minutes

In the past year, I have done a few run throughs of setting up Dynamics GP 2013 in 5/10/15 minutes much to the amazement of experienced consultants. Now The GP 2015 Virtual Machine is available in the MSDN Azure gallery, so you can start doing the same magic with the latest version of GP. If you need help with this, feel free to add a comment or shoot an email and I will put up a short video tutorial.

Read the post from Errol – Announcing, Microsoft Dynamics GP 2015 image available in the MSDN Azure gallery.

Do you need to access a Microsoft Dynamics GP web client installation for a quick test or demo? Need access to a Microsoft Dynamics GP development environment? The Microsoft Dynamics GP images available in the MSDN gallery on Microsoft Azure can help. Use this image to create a virtual machine with Microsoft Dynamics GP fully configured in a matter of a few minutes. The resulting image will contain Visual Studio 2013 Premium and SQL Server 2012 Express along with the following Microsoft Dynamics GP components.

    • Microsoft Dynamics GP
    • Microsoft Dynamics GP Web Client
    • Microsoft Dynamics GP SDK
    • Dexterity for Microsoft Dynamics GP
    • Dexterity Shared Components
    • eConnect for Microsoft Dynamics GP
    • Visual Studio Tools for Microsoft Dynamics GP
    • Web Services for Microsoft Dynamics GP
    • Web Services for Microsoft Dynamics GP SDK
    • Microsoft Dynamics GP pre-requisite software (including Microsoft Lync 2010 SDK Runtime, Microsoft Silverlight 5, Open XML SDK 2.0 for Microsoft Office and Microsoft Application Error Reporting)

See more here:
Setting up Dynamics GP 2015 in 15 minutes

February 21, 2015 · Jivtesh Singh · No Comments
Tags: , , , , , , ,  · Posted in: Blogs I Follow Total Views: 43

What can Winthrop Development Consultants do for you?

David Meego - Click for blog homepageYou have probably heard that I was made redundant (laid off) from Microsoft in October 2014 and have since restarted and updated the consulting business that I had before my 13.5 years with Microsoft as Winthrop Development Consultants.

Now I hear you ask, “What can David Musgrave and Winthrop Development Consultants do for you?”.

Well, read on to understand what Winthrop Development Consultants’ business model and plans are….

After working with Microsoft Dynamics GP since version 1.0 and developing for Dynamics GP since version 2.0 in 1994, I have more than 20 years’ experience working with the development tools for Microsoft Dynamics GP including Dexterity, Modified, Report Writer, Visual Basic for Application, Visual Studio and SQL Server.

I have developed a number of products and features which have either been included in Microsoft Dynamics GP or are available as ISV add-on products. These include Named Printers, Advanced Security, Field Level Security, POP Taxes, Business Activity Statement and Pay As You Go reporting (for Australian GST), Omni Tools, Omni Price, Support Debugging Tool and Menu for Visual Studio Tools.

I have presented at numerous conferences on topics such as cross dictionary development, other development techniques, and the Support Debugging Tool.

While at Microsoft, I led the Microsoft Dynamics GP Asia Pacific Development team, the Microsoft Dynamics GP Asia Pacific Professional Services team and spent about 10 years leading the Microsoft Dynamics GP Asia Pacific Support team in the role of Escalation Engineer.

For more details of my experience and history, please see the About Page on the Winthrop Development Consultants website.

So now you know “almost” everything about my career with Microsoft Dynamics GP, let me explain what I can offer you.


Winthrop Development Consultants offers my development experience to the customers, partners, consultants and ISVs (Independent Software Vendors) in the Microsoft Dynamics GP community. While I am happy to work with any organisation in the Microsoft Dynamics GP community, when working directly with a customer I will also liaise with their partner to keep them in the loop.

The offerings from Winthrop Development Consultants can be divided into the following four areas:

Development

If you have a Microsoft Dynamics GP customisation you want developed, enhanced or updated for a new version, Winthrop Development Consultants can help. With over 20 years’ experience developing for Dynamics GP, Winthrop Development Consultants can develop high quality code quickly.

Even if you have your own development staff, think of Winthrop Development Consultants when they have too much work and need additional resources.

Consulting

Sometimes there will be times when your own development team need an extra opinion from someone with an outside perspective. If you need help designing the methodology for your customisation, help implementing a difficult customisation or assistance with complex development techniques (such as cross dictionary or multi-platform hybrid development), please don’t hesitate to contact Winthrop Development Consultants.

Training

If you don’t have any development staff, but want to get someone trained up, or have existing development staff who you wish to train in Microsoft Dynamics GP customisation tools (especially in Dexterity) then Winthrop Development Consultants can satisfy your training needs.

Products

At this stage I don’t have any products on offer, but am negotiating with Microsoft for ownership of the Support Debugging Tool for Microsoft Dynamics GP, Menus for Visual Studio Tools for Microsoft Dynamics GP and SnapShot for Microsoft Dynamics GP.

I also have a number of my own ideas for new products and will be working on them. Keep an eye on the blog for updates and details in the future.


 

If you are looking at using Winthrop Development Consultants’ services you can purchase time on an ad-hoc basis, blocks of discounted pre-paid time or request a fix price quote.

If you have any questions or think that I can assist you, please don’t hesitate to contact me.

I will be at Convergence 2015 in Atlanta, on 16-19 March 2015, please track me down to have a chat.

David

This article was originally posted on http://www.winthropdc.com/blog.

Filed under: Business, Development, Dexterity, Dynamics, GP, Menus for Visual Studio Tools, Microsoft, Modifier, Products, Report Writer, Support Debugging Tool, Visual Basic for Applications, Visual Studio Tagged: Development, General, News

View the original here:
What can Winthrop Development Consultants do for you?

February 20, 2015 · WinthropDC · No Comments
Tags: , , , , , , , , ,  · Posted in: Blogs I Follow Total Views: 43