This article is dated as Microsoft changes support for OAuth with the device license model. When this article was written (May 2021), the only service to service OAuth authentication method supported is OAuth impersonation. OAuth is only available for BC SaaS. New settings are available in the IW.TimeCollectionModule.Service.exe.config binary patch for Shop Floor Insight.

Configure OAuth for Shop Floor Insight 7.8

1. Set clientCredentialType to None using OAuth impersonation mode.
2. Set DynamicsNavWebServiceAuthenticationMode to OAuthImpersonate.
3. Set AlwaysSendCredentials to true.
4. Add a new setting for OAuthTenant with the BC SaaS tenant GUID as the value.
5. Configure the Windows Credential manager the same as the windows service user (configuration differences in the following steps).
6. Use the full username for the BC SaaS account (in the Users table in the Authentication Email column in Business Central).
7. Use the full password for the BC SaaS account.

Example: