Passing configuration data using Plug-in registration tool (Secured vs. Unsecured)

• CRM plugin registration tool contain “Unsecure & Secure” configuration sections while registering a “Step”
• We can pass configuration data and can be used in the plug-in logic.

Secured vs. Unsecured
Below are key differentiations between Secured and Unsecured data configuration

• Access
  • Data passed through “Unsecure” section is PUBLIC (i.e., It can be read by any user in CRM).
  • Only users with “System Administrator” role have access to the data passed through “Secure” configuration section
• Storage
  • “Unsecure” config data will be stored along with the Plugin ‘Step’ registration information (i.e., In SdkMessageProcessingStep entity)
  • “Secure” config data will be stored in a separate entity named “SdkMessageProcessingStepSecureConfig”
    • Only “System Administrator” has Read access on this entity, hence only users with ‘Sys Admin’ role can access this data
  • Both “Secured & Unsecured” configuration data stored as “Plain text” in DB
• Outlook Sync
• “Unsecured” configuration data is downloaded to the user’s computer when they go offline making it Unsecure
• “Secured” configuration data is NOT downloaded to User’s Computer when they go Offline

How to read Configuration data in Plug-in
In our plug-in class, we can define a constructor that passes two parameters (i.e., unsecure configuration and secure configuration)

public class AccountCreateHandler: IPlugin{
  public AccountCreateHandler(string unsecure, string secure){
    // Do something with the parameter strings.
  }
  public void Execute(IPluginExecutionContext context){
    // Do something here.
  }
}

 If you want to read “Secure” configuration in the plug-in code, either change the user context in plugin registration as “CRM administrator ” or Impersonate to “CRM Administrator” role user in the code