Share
Report
325Hi All,
We have two environments; one is of CRM 2013 which is current production and other is Dynamics 365 which will become new production after upgrade.
We have same server for ADFS for both of these environments. ADFS is not on CRM Server, it is separate.
We are facing strange issue when going to create Relying party trust for new Org(i.e. Dynamics 365), it is not showing any accepted claim types.
See the following screenshot where highlighted values should be yes
After comparing federation metadata URLs of both environments, we come across there is one attribute missing "Optional" in claimType tags in the XML of Dynamics 365 federationmetadata.xml.
Note: Federation metadata URL looks like this
https://[[Federation Service Name]]/federationmetadata/2007-06/federationmetadata.xml
CRM 2013 metadata looks like this
<fed:ClaimTypesRequested>
<auth:ClaimType Uri="schemas.xmlsoap.org/.../upn" Optional="false" xmlns:auth="docs.oasis-open.org/.../200706" />
<auth:ClaimType Uri="schemas.xmlsoap.org/.../name" Optional="false" xmlns:auth="docs.oasis-open.org/.../200706" />
<auth:ClaimType Uri="schemas.microsoft.com/.../primarysid" Optional="true" xmlns:auth="docs.oasis-open.org/.../200706" />
</fed:ClaimTypesRequested>
Whereas Dynamics 365 metadata looks like this
<fed:ClaimTypesRequested>
<auth:ClaimType Uri="schemas.xmlsoap.org/.../upn" xmlns:auth="docs.oasis-open.org/.../200706" />
<auth:ClaimType Uri="schemas.xmlsoap.org/.../name" xmlns:auth="docs.oasis-open.org/.../200706" />
<auth:ClaimType Uri="schemas.microsoft.com/.../primarysid" xmlns:auth="docs.oasis-open.org/.../200706" />
</fed:ClaimTypesRequested>
I have also seen these threads stating similar issue but those are nor resolved and have no clue to fix this issue.
Thanks
*This post is locked for comments
All responses (
Answers (
