CRM on-premise and Exchange Online - IFD required?

(1) Share

Report

Posted on by Community member

Hello,
We have Dynamics 365 v9.1 on-premises, and we are using mailboxes in Exchange on-premises.
Now, I need to synchronize with mailboxes in Exchange Online.
Do I need to configure IFD (Internet-Facing Deployment)?
I don't want to allow external access to CRM but only establish communication with Exchange Online.
That is possible using a Hybrid email server profile. However, I'm not sure if it's necessary to make CRM accessible from internet, setting up IFD.
This info missing there
https://learn.microsoft.com/en-us/dynamics365/customerengagement/on-premises/admin/connect-dynamics-365-on-premises-exchange-online?view=op-9-1
Thank you

I have the same question (0)

All responses (1)

Answers (1)

Verified answer

PhilipK 613 on at

Like (0)

Report

It shouldn't be necessary as the S2S auth between Dynamics 365 on-premise and Exchange online is established via a direct "Server 2 Server" trust relationship between the two.
Exchange Online will not be the one calling to your on-premise environment, it will be the D365 AsyncService that will calling the Exchange online via Server-side syncronization.
Even thou I haven't performed this configuration via the Hybrid connector I would pressume it's basically a Powershell script executed against your the Exchange Online passing in configuration parameters from your D365 on-premise environment, providing it with the stuff like RealmID along with the configured certificate to establish the trust.
In fact, the trust is using the same certificate(that you configure via the .Tools\CertificaterRconfiguration.ps1) for SharePoint integration.

However, the only reason Exchange Online "might" need to access your environment via IFD would be if Exchange Online would call your D365 environments metadataendpoint to check if the certificate has been changed and for automatic rollover to any new S2S certificate.
But I almost assume MS Hybrid connector does that for you once setup.

Best regards.
Philip

Was this reply helpful? Yes No