Dynamics 365 Commerce – On-behalf-of support now available in Microsoft Entra External ID

🚨 The Signal: Dynamics 365 Commerce now supports 'on-behalf-of' ordering with Microsoft Entra External ID. This enables customer service and sales agents to place orders for B2B customers, improving B2B commerce workflows and migration options.

The Impact

Customer service and sales agents are affected by new delegated ordering capabilities, introducing potential identity and access management risks if not properly configured.

• Customer Service Agents: Can place orders for others, increasing privilege scope.
• Sales Agents: Gains delegated ordering ability, requiring access review.
• Security Team: Needs to review delegated identity permissions.
• Compliance Officers: Must ensure delegated access aligns with policy.

The Action

1. Review existing Entra External ID policies for delegated access.
2. Audit roles and permissions for Dynamics 365 Commerce users.
3. Implement least privilege for 'on-behalf-of' ordering roles.
4. Monitor audit logs for delegated ordering activities.

Domain: Entra · Impact: medium · Workload: Entra ID