As announced in the news post on Formpipe’s Support Portal, Microsoft is starting the Enablement of Managed identity-based authentication in Dynamics 365 Finance and Operations for Sandbox and Production (PROD) environments.

Once this happens, the EnableRegisterOfAzureStorageInterceptors Flight mode will be set to Yes.

Completion dates:

• Sandbox: 21st April 2025

• PROD: 31st May 2025

Once the EnableRegisterOfAzureStorageInterceptors Flight mode is set to Yes, user-delegated SAS will be supported in your Microsoft-managed environment.

However, if you have multiple AOSs, as is typical in PROD environments, a delay may occur while the change synchronizes to all your AOSs. This may cause downtime or inconsistent behavior between users. Some examples of this behavior include:

• Using Recycle SAS token in Lasernet > Setup > Parameters results in errors for some users.

• Printing only works for some users. Changing the Send SAS tokens value in Lasernet > Setup > Parameters may fix the issue for some of them.

If the Flight mode has been enabled and the environment should support user-delegated SAS (Flight mode EnableRegisterOfAzureStorageInterceptors set to Yes), but you experience issues when printing, this is likely due to the Flight mode change not being complete in all your AOSs. Set Send SAS tokens back to Disabled in Lasernet > Setup > Parameters, wait at least one day, and then set the value to Automatic or User delegated key.

To minimize the risk of downtime, you may choose to proactively coordinate the Flight mode change with Microsoft before the completion dates mentioned above.

Follow the recommended steps:

1. Manually configure the use of connection strings. This will be temporary while the Flight mode change syncs to all AOSs.

a. Navigate to Lasernet > Setup > Parameters and set Send SAS tokens to Disabled.

b. Navigate to Lasernet > Setup > Administration > Lasernet servers and ensure the Lasernet Azure Command name in the reports storage field either points to your Azure Storage command or is left blank.

c. Validate the Lasernet server.

2. Coordinate with Microsoft to enable user-delegated SAS before the deadline.

a. Contact Microsoft and request that they enable user-delegated SAS in your environment by setting your EnableRegisterOfAzureStorageInterceptors Flight mode to Yes. You will need to provide Microsoft with your Environment ID.

b. Request that Microsoft make the change after hours to increase the chance that all AOSs are synced in the morning.

c. Request that Microsoft restart all AOSs after the switch.

3. Wait for the Flight change to be completed in all AOSs. The amount of time necessary will depend on the number of AOSs. We recommend waiting at least one full day after the Flight mode has been turned on before proceeding to the next step.

4. Enable Send SAS tokens.

a. Navigate to Lasernet > Setup > Parameters > Performance and set Send SAS tokens to Automatic. Click Recycle SAS tokens to ensure no errors occur and the environment supports user-delegated SAS.

b. Navigate to Lasernet > Setup > Administration > Lasernet servers and ensure the Lasernet Azure command name to reports storage field points to your Azure Storage SAS command or is left blank.

c. Validate the Lasernet server.

The instructions provided in this article are applicable if you meet all the following criteria:

• Microsoft-managed Dynamics 365 Finance and Operations environment

• Lasernet FO Connector 7.1 and above

• Lasernet 10.10.2 and above

• Flight mode EnableSharingOfValidStorageConnectionString is set to Yes.

If you have a different type of environment or if you would like more information on this topic, consult this article.

If your Lasernet FO Connector and Lasernet versions are older than 7.1 and 10.10.2, respectively, you must upgrade to comply with Microsoft’s improved platform security.