1. Log in to your OnePlan group with your Office365 account.
2. Open the Admin pages by clicking on the Settings gear.
3. Select Integration in the admin navigation.  
4. Click the + (plus) icon in the Authentication Keys section.
5. Save the key name & generated key somewhere (such as in a notepad doc), as once you navigate away, the key cannot be seen.  To be used at a later step in the OneConnect configuration.

1. Go to https://my.oneconnect.ai
2. Configure the following integration: OnePlan and Project for the Web.  Click the Configure button.

ONEPLAN

1. Authentication Key: Enter/paste the OnePlan Key that you saved from the earlier OnePlan Setup steps.
2. Click the Next button.

INTEGRATOR

1. Click the Next button.

PROJECT FOR THE WEB

1. Project for the Web URL: Enter in the CDS/Dynamics URL (eq. https://org123.crm.dynamics.com/).
2. Enter in username and password that will be used (Preferably a service account).
   NOTE: The user needs to have admin access to the PowerApps environment you are connecting to.
3. Client ID (Azure App ID):
   • If you are a tenant admin: Click Click here to approve consent to use the default app registration for this tenant.
   • Otherwise: Follow CDS (Common Data Service) / Dynamics Setup. Then enter/paste the Application (Client) ID from CDS/Dynamics that you saved from the CDS/Dynamics Setup steps.
4. Click Save.

1. Go to https://portal.azure.com.  An Admin account required to approve API access.
2. On the top left corner, expand the portal menu navigation and select “Azure Active Directory”
3. On the left navigation, select “App Registrations”
4. Click “New Registration”
   • Name: Fill out whatever name to identify the App Registration.
   • Click the Register button.

Once “Registered”, you will be directed to the recently created App configuration home page

Save the “Application (client) ID” – To be used at a later step in the OneConnect configuration.

Go to the “Authentication” tab on the left (located on the left under “Manage” section)

Make sure on the “Supported account types” section, “Accounts in this organizational directory only” is selected. Also make sure to enable the "Allow Public Client Flows" from the "Advanced Settings" section by toggling it to Yes.

Go to the “API Permissions” tab on the left (located on the left under “Manage” section)

Click on “Add a permission”

1. Add “Dynamics CRM”
   • Select “Delegated permissions”
   • Check the “user_impersonation” permission
   • Then finally “Add permissions”