Extended support for Microsoft Dynamics NAV 2017 ends on 11 January 2027 (Microsoft Lifecycle). With it, the security updates at no additional cost that this phase has included so far come to an end. Anyone who has connected an online shop to NAV 2017 now faces two tasks at once: moving to Business Central and moving the shop interface. Migration plans tend to treat the second part as a side issue, yet day-to-day business depends on it: orders, stock, prices and customer data. This guide shows the paths to Business Central, why the old SOAP and OData pages do not carry over as an interface, and how to move to API v2.0, OAuth and webhooks while both systems run in parallel, without orders getting stuck. Our page on the Dynamics NAV integration describes which data typically flows.
What ends on 11 January 2027
Dynamics NAV 2017 follows Microsoft's Fixed Lifecycle Policy (Microsoft Lifecycle). The version was released in October 2016, mainstream support ended in January 2022 (Microsoft Lifecycle), and extended support ends on 11 January 2027 (Microsoft Lifecycle). Microsoft states all support dates in Pacific Time (Microsoft Lifecycle). For planning in Germany, 11 January 2027 is therefore the cut-off date.
The Fixed Lifecycle Policy provides a minimum of five years of mainstream support, during which Microsoft also ships non-security updates and accepts requests to change features (Microsoft Lifecycle). In extended support, where NAV 2017 has been since January 2022, there are security updates at no additional cost, but no new features and no design changes (Microsoft Lifecycle). On 11 January 2027 this phase ends as well. For the time after that, the policy only mentions security updates through an Extended Security Update program (Microsoft Lifecycle). For NAV 2017, the product page lists no such program.
Support dates of the NAV versions at a glance
| Version | End of mainstream support | End of extended support | Status in October 2026 |
|---|---|---|---|
| Dynamics NAV 2016 | April 2021 | April 2026 | expired |
| Dynamics NAV 2017 | January 2022 | 11 January 2027 | running out |
| Dynamics NAV 2018 | January 2023 | January 2028 | in extended support |
| Business Central 14 on-premises | October 2023 | October 2025 | expired |
All dates come from Microsoft's lifecycle pages and are given in Pacific Time (Microsoft Lifecycle). Internally, NAV 2017 carries version number 10 (Microsoft Learn). If you run NAV 2018, you have one more year. The last row is worth noting: Business Central 14, the first stop on the way from NAV to a current version, has itself been out of support since October 2025 (Microsoft Lifecycle). It only works as an intermediate step, not as a target.
NAV 2017 does not switch itself off on 11 January 2027. Server, database and interfaces keep running. What ends is Microsoft's support and with it the supply of security updates that extended support has included so far (Microsoft Lifecycle). For the shop integration this means: the web services through which the shop hands over orders remain reachable, but receive no more fixes.
Why the shop integration is the critical part
In Dynamics NAV, shop integrations usually run through web services. NAV supports OData web services in addition to the SOAP web services that have been available since Dynamics NAV 2009 (Microsoft Learn). What gets published are pages and codeunits: pages deliver items, stock or customers, codeunits encapsulate processes such as the order import. In NAV, codeunits cannot be accessed through OData (Microsoft Learn), which is why order imports in particular often depend on SOAP. Authentication uses a user name and password or a web service access key, unless the server is set to Windows authentication (Microsoft Learn).
Business Central does not take this technology over unchanged. There, SOAP is considered superseded by OData V4, and Microsoft recommends migrating integrations to OData V4 as soon as possible (Microsoft Learn). OData V3 has been removed since Business Central 2021 release wave 1 (Microsoft Learn). From version 29.0, that is with 2026 release wave 2, Microsoft pages can no longer be published as SOAP endpoints (Microsoft Learn). From version 30, which is due with 2027 release wave 1, the same applies to OData endpoints (Microsoft Learn). Microsoft pages are all pages from apps with the publisher Microsoft, including the Base Application. If you still need such pages as endpoints, Microsoft says you have to copy them into an extension of your own.
A UI page isn't an API, so changes to them can happen in a release without being considered a breaking change.
Microsoft Learn, Deprecated features in the platform
Then there is authentication. In Business Central online, integrations that sign in with a web service access key (Basic Auth) stopped working after 1 October 2022, and OAuth2 is the only authentication option there (Microsoft Learn). For Business Central on-premises, the access key remains an option for the time being. The interface version has moved on as well: the standard API v1.0 was dropped with version 28.0, the current one is API v2.0 (Microsoft Learn). A shop integration built today therefore relies on API v2.0 and OAuth, not on published UI pages. If you already run a middleware layer between shop and ERP, you only replace its ERP side; if your shop is connected directly to NAV, you rebuild the connection.
Old and new integration compared
| Aspect | Typical integration with NAV 2017 | Business Central online |
|---|---|---|
| Interface | SOAP codeunits and OData pages | Standard API v2.0 (REST, OData V4) and custom API pages |
| Authentication | User name and password or access key | OAuth 2.0 via Microsoft Entra ID |
| Detecting changes | Polling at a fixed interval | Webhooks, renew the subscription at least every three days |
| Customizations | C/AL directly in pages and codeunits | AL extensions, standard APIs without extra fields |
| Updates | Timing set by the business | two major updates per year, in April and October |
| Limits | Own server capacity | Limits per user, such as 6,000 OData requests in 5 minutes |
The table shows why simply changing the address rarely suffices. Almost every row calls for a decision in the integration: new keys, a new sign-in, a new way of handling changes and error handling that can deal with the per-user limits. Business Central online processes at most 5 OData requests per user at the same time; further requests wait in a queue, and a request that has waited 8 minutes times out with status 503 (Microsoft Learn). Our article on connecting Business Central shows how batch requests and retry logic respond to this.
Which paths lead from NAV 2017 to Business Central
There is no direct jump from NAV 2017 to the cloud. If you are currently on a version of Dynamics NAV, you must first upgrade to Business Central on-premises and can only then switch to Business Central online (Microsoft Learn). Both paths to the cloud start with the upgrade to Business Central version 14 (Microsoft Learn). To reach the current version, Microsoft lists a chain of intermediate steps for NAV 2017:
- Upgrade from NAV 2017 to Business Central Spring 2019, version 14. This converts the application from C/AL to AL (Microsoft Learn).
- Upgrade from version 14 to Business Central 2024 release wave 2, version 25. A direct step from version 14 to the newer versions is no longer supported since version 26 (Microsoft Learn).
- Upgrade from version 25 to the on-premises target version, currently version 29 from 2026 release wave 2 (Microsoft Learn).
- If desired, the switch to Business Central online with the cloud migration tool, which is possible directly from version 25 (Microsoft Learn).
For the move to the cloud, Microsoft distinguishes two variants. Full migration carries over all data and customizations and requires converting C/AL customizations into AL extensions (Microsoft Learn). Reimplementation with the Business Central 14 reimplementation tool carries over only master data, balances, a subset of posted history and setup data, and in return does not require converting customizations (Microsoft Learn); Microsoft currently lists the tool as a preview.
If you stay on-premises, the lifecycle model changes. Business Central on-premises from 2019 release wave 2 onwards falls under the Modern Lifecycle Policy, and Microsoft only supports the software if the business keeps it current (Microsoft Learn). Version 29, for example, released in October 2026, is supported until April 2028 (Microsoft Lifecycle). Instead of one big upgrade every few years, regular updates are due, and each of them also affects the shop interface.
In Business Central online, OAuth is mandatory, and Microsoft rolls out two major updates per year, in April and October (Microsoft Learn). On-premises, the business sets the update date and can keep using the access key for now. The deprecation of SOAP and OData endpoints on Microsoft pages, by contrast, is not restricted to the online variant in the list of platform changes (Microsoft Learn). A newly built integration on API v2.0 is therefore the more sustainable path in both cases.
The new interface: API v2.0, OAuth and webhooks
Business Central provides standard APIs for integrations that can be called via REST from any programming language (Microsoft Learn). In API v2.0, records carry unique GUID keys and can be retrieved via the immutable SystemId (Microsoft Learn). This has consequences for the move: the shop has so far known items and customers by their NAV numbers, in future it also needs the SystemId, or the integration translates between the two. Standard APIs cannot be extended with additional fields. If you need fields that NAV delivered through a customized page, you copy the API into a custom API page and extend it there (Microsoft Learn). Our article on connecting Business Central to Shopware describes in detail what an integration with a Business Central system that is already running looks like.
For authentication, an application account rather than a personal user account is the better choice for a shop integration. Microsoft distinguishes between signing in on behalf of a user, which requires an interactively signed-in user, and service-to-service authentication of an application (Microsoft Learn). The application is registered in Microsoft Entra ID and receives access tokens without anyone sitting at a screen. Permissions are granted as narrowly as possible: the integration reads items, stock and prices and creates orders, nothing more.
Webhooks make a noticeable difference in daily operation. Instead of asking at intervals whether stock has changed, the integration subscribes to change notifications. Business Central does not send them immediately, but by default waits 30 seconds after the first change to a record (Microsoft Learn). If more than 1,000 records change during that time, a single collection notification arrives instead of individual ones (Microsoft Learn). A subscription expires after three days unless it is renewed before (Microsoft Learn). Our article on webhook architecture describes how to process such events cleanly in the shop. The integration creates a subscription for item changes roughly like this:
{
"notificationUrl": "https://shop.example/bc-webhook",
"resource": "/api/v2.0/companies({companyId})/items",
"clientState": "{shared-secret}"
} When a subscription is created and every time it is renewed, Business Central checks the target address: it has to return the validationToken it was sent in the response body with status 200 (Microsoft Learn). If Business Central cannot reach the subscriber, it retries delivery over the next 36 hours (Microsoft Learn). That only applies, however, if the subscriber responds with 408, 429 or an error in the 500 to 599 range; with any other code, the subscription is deleted (Microsoft Learn). A renewal job and periodic reconciliation as a fallback are therefore part of the integration.
Running in parallel: orders must not get stuck
For the shop, the most delicate moment of an ERP change is the cutover. A proven setup has the shop write orders not directly into the ERP but into a queue from which the integration picks them up. If the ERP stands still for a few hours, orders collect there instead of being lost. Each order carries the shop's order number as the external document number, so that a duplicate import stands out if an order arrives a second time after the cutover.
- Inventory: Which web services does NAV 2017 publish, which of them does the shop use, in which direction, how often and with which account?
- Mapping: For every field of the old interface it is clear where it comes from in Business Central: standard API, custom API page or calculation in the integration.
- New integration against a sandbox: The interface is built against a Business Central sandbox and tested there with test orders.
- Dry run: Microsoft recommends at least one full dry run of the migration in a sandbox before the cutover (Microsoft Learn); the shop integration runs along.
- Shadow operation: The new integration reads stock and prices from Business Central but does not write anything yet. A comparison with NAV reveals deviations before customers see them.
- Cutover: Pause order transfer, complete the last orders in NAV, migrate data, switch the integration, release the queue.
- Follow-up: Reconcile orders, stock and payment status between shop and Business Central and monitor the interface.
That integrations belong in the migration plan is also stated in Microsoft's own roadmap: for the period after the migration, Microsoft explicitly lists reconnecting integrations, alongside enabling users and monitoring the environment (Microsoft Learn). In the project plan, the shop integration should therefore be a workstream of its own with its own test, not an item on the acceptance list of the ERP project. This applies all the more to real-time inventory sync across several channels, because there every delay shows up as overselling.
A sandbox with a copy of production data contains real customer addresses. Before the new integration creates test orders there, email dispatch, shipping labels, payment reconciliation and outputs to other systems must be switched off or redirected to test targets. Otherwise a customer receives an order confirmation for an order that does not exist.
Inventory: what the old integration does today
Many surprises during the move come from tasks the old integration quietly took care of. It has often been extended over the years without anyone keeping a list of its tasks. An inventory before the first draft therefore saves time. It should answer these questions:
- Which pages and codeunits are published as web services in NAV, and which of them does the shop actually call?
- How does the shop sign in: with user name and password, with an access key or via a Windows account?
- Which custom fields does the interface transfer, such as additional item details, delivery terms or customer groups?
- How are customers created: does the shop create new customers in NAV, or does it assign orders to existing customers?
- Where do customer-specific prices and tiers come from, and how often are they synchronized?
- Who reports shipping status and tracking numbers back to the shop, and how?
- What happens on an error: are there retries, logs and a notification?
- Which other sources write orders into the ERP, such as orders by email or PDF that run through AI order entry?
The answers produce a mapping table with old source, new target, conversion and owner. It is the basis for development and later for acceptance. For B2B shops with customer groups, contract prices and approvals, it typically becomes considerably longer than for pure consumer shops; our page on B2B e-commerce shows which requirements are typically added there.
Timeline up to the end of support
Little time remains until 11 January 2027, especially since December is taken up by year-end closing and stocktaking in many businesses. A complete move to Business Central including a new shop integration often can no longer be finished in that time. What matters is an order of steps that reduces the risk first:
- Right away: Take inventory of the interface and decide on the target path, online or on-premises.
- Before the cut-off date: Shield the NAV server and the published web services. The web services should only be reachable for the integration, not openly on the internet, and should run encrypted over SSL, as Microsoft recommends for sign-in with password or access key (Microsoft Learn).
- In parallel: Build the new integration against a sandbox so that it is ready as soon as the ERP upgrade reaches the target version.
- After the cut-off date: Document continued operation of NAV 2017 as a temporary exception, with a fixed date for the cutover.
If you have other dates to keep an eye on at the same time, you will find them in the 2027 deadline calendar for online shops. And if your shop runs on Shopware 6.5, the end of security updates for Shopware 6.5 brings a second deadline shortly after the NAV cut-off date. Both changes can then sensibly be arranged in one joint plan so that shop and ERP are not rebuilt in the same week.
An ERP without security updates still processes names, addresses and orders from the shop. Art. 32 GDPR requires appropriate technical and organisational measures, taking into account the state of the art (GDPR). If you operate NAV 2017 beyond the cut-off date, you should therefore agree this decision with your data protection officer and document the reasons.
Typical pitfalls when moving the interface
- Subscriptions expire: A webhook subscription that is not renewed ends after three days (Microsoft Learn), and stock levels then silently stop updating. A monitoring job checks the expiry date in the
expirationDateTimefield. - Throttling under load: With status 429, the integration needs a retry with a cool-off period (Microsoft Learn). Without it, updates get lost precisely at peak times.
- Custom fields are missing: What a customized NAV page delivered is not part of any standard API. This often only shows up in testing, when a field in the shop stays empty.
- Filters behave differently: Even NAV did not support an OR operator across different fields in OData filters (Microsoft Learn). Queries of the old integration are therefore rewritten for the API instead of being carried over unchanged.
- Two major updates per year: In Business Central online, new major versions arrive in April and October (Microsoft Learn). The integration should be tested before every update in a preview sandbox, which Microsoft provides about one month before the update (Microsoft Learn).
- Monitoring is missing: An interface that fails silently at night is noticed the next morning through customer enquiries. Monitoring the queue, errors and subscription status is part of the move, much like shop monitoring for availability and load time.
How we support moving the shop integration
We connect online shops with Dynamics NAV and Business Central, online and on-premises alike, and work on both sides of the interface. The ERP change itself is usually handled by a Microsoft partner; we focus on the part that day-to-day business in the shop depends on and coordinate it with the ERP project.
Inventory
We record published web services, data flows, custom fields and error paths of the existing integration and turn them into the mapping table for Business Central.
New integration
We build the interface on API v2.0, OAuth and webhooks, with custom API pages where needed, for Shopware and other shop systems. Items, stock, prices, customers, orders and shipping information run through the same connection.
Parallel operation and cutover
Shadow operation, a dry run in the sandbox and an agreed cutover window in which a queue buffers the orders until Business Central takes them over.
Stable operation
We build renewal of webhook subscriptions, retry logic for throttling and error notifications directly into the integration, as part of our custom programming.
If it is still open which path suits your company, we clarify it in a consultation: starting point, target system, timeline and the question of what can realistically be achieved by 11 January 2027. Our page on integrations gives an overview of further ERP and marketplace connections.
This article draws on information from Microsoft: the lifecycle pages for Dynamics NAV 2016 to 2018 and for Business Central on-premises, the overview of products ending support in 2027, the Fixed Lifecycle Policy and the documentation on Microsoft Learn on NAV web services, upgrade paths, cloud migration, deprecated features, operational limits, API v2.0, OAuth, webhooks, API limits and update cycles. The statement on Art. 32 GDPR follows the text of the regulation in the Official Journal of the EU. All information retrieved on 6 October 2026; Microsoft states support dates in Pacific Time.
Yes, the software keeps running. What ends is Microsoft's extended support and with it the supply of security updates that this phase has included so far (Microsoft Lifecycle). Any vulnerability that becomes known later will then usually remain unfixed by the vendor. Whether there are alternatives for your installation should be clarified with your Microsoft partner.
No. Microsoft first requires an upgrade to Business Central on-premises, and both paths to the cloud start with version 14 (Microsoft Learn). To reach a current version, the path from NAV 2017 leads via version 14 and version 25 to the target version (Microsoft Learn).
Usually not unchanged. From version 29.0, Microsoft pages can no longer be published as SOAP endpoints, and from version 30 no longer as OData endpoints (Microsoft Learn), and Business Central online only accepts OAuth (Microsoft Learn). An integration via API v2.0 is therefore typically the more sustainable path.
With a queue between shop and ERP, an agreed cutover window and an import that detects duplicate orders by the shop's order number. After the cutover, a follow-up run reconciles orders, stock and payment status. This lowers the risk considerably, although no switch can rule it out entirely.
That depends on the number of web services in use, on custom fields and on special cases such as B2B prices. A reliable estimate is only possible after the inventory. Experience shows that it pays to develop the new integration against a sandbox in parallel with the ERP upgrade, so that it is ready for the cutover.
Per user, the limits include at most 6,000 OData requests within a 5-minute sliding window and 5 requests processed at the same time (Microsoft Learn). Webhook subscriptions expire after three days unless they are renewed (Microsoft Learn). A well-built integration works with webhooks, batch requests and a retry on status 429.