Crm 2013 + ADFS works in mozilla only

(0) Share

Report

Posted on by Andrew73

1,471

Hi,We just set it up, Crm 2013 + ADFS . Working im Mozzila only. in IE - bad request, in Chrome - ERR_INVALID_AUTH_CREDENTIALS. Does anybody know how to troubleshoot it?

Thanks!

*This post is locked for comments

I have the same question (0)

All responses (6)

Answers (1)

Wayne Walton 13,730 on at

Like (0)

Report

Does Mozilla give you a popup, or an actual login page? What version of ADFS are you using?

Was this reply helpful? Yes No
Verified answer

Bruno Lucas 5,421 on at

Like (0)

Report

check this out:

community.dynamics.com/.../135444.aspx

Was this reply helpful? Yes No
Andrew73 1,471 on at

Like (0)

Report

Popup login, v3.0

Was this reply helpful? Yes No
Wayne Walton 13,730 on at

Like (0)

Report

So a popup means IFD is not configured properly. so it's more surprising that Firefox does work, than that the other two don't.

You should get a website like this:

When using ADFS 3.0 (yes, that is the CRM Online login page, but ADFS 3.0 looks like that too).

I would recommend you check out the updated implementation guide for CRM and make sure all the steps for ADFS 3.0/IFD have been followed. There's a missing link in there somewhere.

If that doesn't help, screenshots of your ADFS, CRM deployment, and IIS bindings might be the next step.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Make sure that all CRM urls and ADFS are in Trusted Sites (or equivalent) in the browser to get a single-sign-on experience. You can use a wildcard for this such as *.InternalDomain.com, and you can set this using a Group Policy preference (GPPE) setting.

Was this reply helpful? Yes No
Andrew73 1,471 on at

Like (0)

Report

The problem is lay down in SPN's. IE connects to server's SPN name like host/fsserver.contoso.com. After removing this name from server's SPN names list in ADSI snap-in and adding http/fsservice.contoso.com everything began working. The problem being it's not a correct fix. I suspect something wrong in CRM request route, ADFS settings or .... Still don't know . Thanks

Was this reply helpful? Yes No