Decionis
Microsoft Marketplace

Azure Sign-On and Activation Reference

Use this page as the canonical reference for the current private-beta Microsoft commercial activation path, buyer onboarding flow, and extension-track posture for AppSource/Azure Marketplace.

Partner Center Inputs

Sign-on URL
https://decionis.com/marketplace/microsoft/azure-signon
Landing Page URL (Microsoft-managed licenses)
https://commerce.decionis.com/platforms/microsoft/landing
Connection Webhook
https://api.decionis.com/v1/platforms/microsoft/events
Teams SSO App ID
3d7923b6-91d6-45e9-996d-a7f18e7f2ca0
Teams SSO App URI
api://decionis.com/3d7923b6-91d6-45e9-996d-a7f18e7f2ca0
Teams Bot App ID
4e6e163e-59dc-4070-b474-376a2c5fbfc8

Core Flow

  1. Complete the purchase in Microsoft Marketplace. Microsoft opens the landing page above with your purchase token.
  2. The token is resolved and the exact plan you bought is activated in Decionis Commerce.
  3. Sign in with your Decionis account. Your workspace opens, or is created for that plan.
  4. Plan changes, suspensions, and cancellations from Microsoft arrive at the connection webhook and update the same subscription.

One Microsoft lifecycle serves every Decionis Microsoft offer. Extension workloads are separate tracks.

Capability Posture

Commercial activation and entitlement binding
Operational

Every Microsoft offer runs through one lifecycle in Decionis Commerce: your landing-page token is resolved, the exact plan you bought is activated, and each subscription change from Microsoft is recorded.

Zero-config workspace onboarding
Operational

After purchase you sign in with your Decionis account, and your workspace opens or is created for that plan with no manual setup step.

Microsoft Graph enrichment
Operational

The Teams finance tab exchanges native Teams SSO for Microsoft Graph and reads the signed-in user plus workspace metadata when tenant consent and secret configuration are present.

Power Automate execution-control connector
Operational

Power Automate finance workflows can call a shipped Decionis policy-check endpoint and register webhook triggers through the published connector spec before executing or resuming an action.

Teams enterprise app pack and SPFx
Partial

The shipped Teams package installs to a team by default: a team-scoped governance tab and a registered bot that posts auto-escalated actions into the team channel as interactive Approve/Reject cards. Channel routing binds automatically when Decionis is added to a channel, and gate-time escalations fan out a card with a signed Decision Dossier. The capability stays partial only until Microsoft completes bot/team-scope validation in the target tenant. SharePoint Framework remains a separate planned workload.

Dynamics 365, Business Central, and Power Platform extensions
Partial

The Dataverse managed-solution package, Business Central AL add-on, and shared Microsoft event gateway are implemented locally. Clean-tenant installation and Microsoft certification remain release gates.

Azure Service Bus and Event Grid ingestion
Partial

Entra-protected Event Grid delivery, a Service Bus subscriber worker, narrow-scope Bicep templates, schema admission, replay, and disconnect are implemented. Production tenant and load validation remain release gates.

Dynamics 365 Finance & Supply Chain business events
Partial

Finance and Operations business-event normalization and Azure transport paths are implemented. Exact catalog identifiers and payload fixtures must still be captured from each target release before public support claims.

Microsoft Security services
Planned

Security evidence export is supported; direct productized Microsoft Security service integrations are tracked as a later workload.