In order to use Integration Framework with CRM, BSS needs to authenticate itself by using OAuth2 (ClientID, ClientSecret, user name, password and resource). These values can be retrieved while adding "Application Group" in AD FS. 

Add new Application Group

For adding a new application Group, you should do the following:

1. Navigate to "Application Groups" and select the template "Server application accessing a web API".
   
   
   
   
2. Specify the "redirect URI". The redirect URL should be http://<BSS FQDN>/core/oAuth/authorizedProvider where <BSS FQDN> is the URL of your BSS. For the "client identifier" field you should enter your client id. 
   
   
   
   

3. Press Next for configuring the application credentials. 

   
   
   

4. The next step is for configuring WEB API. The identifier you will select should be the base CRM web API URL
   
   
   
   
5. Set the access control policy. Make sure that you will enable the openid option.
   
   
   
6. Press Next for reviewing the application group settings before the group creation.
   
   

Entities Mapping

Below table contains the relation between CRM web API and models for a ready-to-use integration setup