Register the app

1. First, you’ll need to have an administrator who can log into the Azure Portal.
2. In the search box, type App Registration and select that option:
3. Click on New Registration as shown in the below screenshot:
4. You will then choose settings for your new application.
   1. Enter a display name for the application (e.g. GPMFAApp)
   2. For Supported account types prior to the Fall 2023 (18.6) release, you were limited to the second option (Account in any organizational directory (Any Microsoft Entra ID account – Multitenant)). If you are on 18.6 or later, you can also use the (Account in this organizational directory only (%domain% only – Single tenant)) option. Choosing the wrong option can lead to an Unknown Error when using MFA in Dynamics GP.
   
5. Click on Register button.
6. Click on API Permission on the left side panel as shown in the screenshot.
7. Click on Add permission button.
8. Microsoft Graph – By default, Microsoft Graph application will have read permission for the user profile. To allow a Graph application to send an email, we need to add some specific permissions.
9. Click on “Delegated permissions”.
10. Search for “Mail.Send” in the Select permission search box.
11. Mark the “Mail.Send” and “Mail.Send.Shared” checkboxes and click on Add permissions.
12. Mail.Send and Mail.Send.Shared permissions will be added under Microsoft Graph.
13. Click on “Authentication” on the left panel under Manage option.
14. Click on Add Platform.
15. Enter the value “urn:ietf:wg:oauth:2.0:oob” in the Custom Redirect URIs text box as shown in the screen shot. This uri will redirect to the original application.
16. Click on Configure button
17. Save the changes for the application. NoteMulti-Factor (Modern Auth) Authentication is supported in Web Client with 18.5 release or later. Refer to Web Client setup with Modern Auth
18. Click on Overview on the left side pane. The Application (client) ID will be used in the Microsoft Dynamics GP client.

From the setup that was done in Azure, now launch Microsoft Dynamics GP 18.3 or later and go to Tools, Select Setup, choose Company and click Company E-mail Setup. Enter the Application (Client) ID into this Desktop Properties section of this window.

If you’re using a Single tenant app registration you will also need to pull the Directory (Tenant) ID from the aboeve Overview window and enter that into the Tenant ID field.

[11:21 AM] Steve Rodionoff

To enable Modern authentication, you must perform an App registration in Azure Active Directory. And then configure GP to use this application (client) ID.

Setting up App registration in Azure for GP Emailing:
Multi-Factor Authentication – Dynamics GP | Microsoft Docs

The GP configuration side of the setup can be found here:
Microsoft Dynamics GP Fall 2020 – Modern Authentication

If using Web client, there is an additional option to enable email support from the web client interface.

Microsoft Dynamics GP October 2022 – Modern Authentication in Web Client – Microsoft Dynamics GP Community

Troubleshooting

Dynamics GP Email Troubleshooting Guide – Dynamics GP | Microsoft Learn

Additional information for GP 18.5 and above

Multi-Factor Authentication – Dynamics GP

New in October 2020 – Multi-Factor Authentication