BC 23 using Entra groups for permissions

njhansen

Could someone supply advice, experience, or documentation for setting up on-prem BC 23 to use Entra groups to control user permissions within BC?

We used to use AD groups for years in Nav, and really missed them in user setup for earlier versions of BC. The release notes for BC 23 seem to imply that Entra groups are valid now, and https://learn.microsoft.com/en-us/dynamics365/business-central/ui-security-groups gives instructions for setup, but I cannot get them to work.

I've got a service set up to use Windows Authentication as directed for our on-premises install (although other services are using Entra MFA), and the service login has Entra reader permissions, but it will only ever show me the local groups on the machine, not the AD groups (which should include copies of most of the Entra groups, since we are running hybrid AD).

Thoughts?