MscrmTools

I cannot confirm as I don't have the same deployment available so I cannot debug. Problem can comes from Microsoft Assemblies or my code but without an available deployment, this...

@DigitalFlow I do understand the concern but even if I used a master password, developers will be able to use reflection to extract the password. Or, the master password should...

Yes they do. Because it is not possible to have plugins with UI and isolation in different app domain, all code (XrmToolBox and its plugins) are executed in the same...

Actually, we can’t. Except reading source code to ensure there is no malicious code included

no, it's not. I cannot handle reviewing source code of each and every plugin

I just found this: https://www.azurefromthetrenches.com/capturing-and-tracing-all-http-requests-in-c-and-net/ Maybe I could add a http listener that will warn and block outgoing requests that don't match the current connection for the plugin?

Crap! two problems: - I cannot know what is the plugin that sends http requests - I don't find how to get the body of the request (for example, a...

Just wondering what is the interest to encrypt password if you can get it with just a click.

Makes sense... I’m already in the process of releasing a new version of connection controls and XrmToolBox so that will be for next release

Can you send details of how you set up the whole thing? You need: - An azure AD app properly configured with a reply url, a secrect and proper api...