web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Microsoft Dynamics CRM (Archived) / Modern Application on ...
Microsoft Dynamics CRM (Archived)

Modern Application on Windows 10 prompting for Windows Authentication

(1) ShareShare
ReportReport
Posted on by Jan Hajek 50

Hi everyone, we have configured an CRM 365 on-premise (8.2.0001.0176) along with Internet Facing Deployment, however when our users try to access the CRM through the Windows 10 application, they are prompted for Windows Authentication first rather than being redirected to ADFS immediately. We did some Fiddler debugging and figured that the issue is when the application requests /XRMServices/2011/Organization.svc/web?SdkClientVersion=7.0.0000 it receives multiple WWW-Authenticate headers (Negotiate, NTLM and Bearer which contains the address to the ADFS and the resource). My question is - why does the server return NTLM or Negotiate? I am accessing the CRM from extranet so no Windows Authentication prompt should happen. Are there any solutions to prevent this? It is quite annoying for the users.

*This post is locked for comments

I have the same question (0)
  • Aric Levin - MVP Profile Picture
    Aric Levin - MVP 30,190 Moderator on at

    First of all, are you sure you are running the correct version of the Windows 10 application. The SDK Client Version shows version 7, where it should be version 8 (CRM 2016).

    I would also check that the CRM site and adfs site urls are on the trusted sites in the users' IE.

    If that doesn't work, we would need to check if there are any particular settings that have to be modified in ADFS.

    Hope this helps as a starting point.

  • Jan Hajek Profile Picture
    Jan Hajek 50 on at

    Thanks for the reply. I have the latest version of Dynamics 365 application from Windows Store on Windows 10 (1709). I am accessing the CRM from non-domain joined device and the target state is to receive the ADFS forms authentication instead of the Windows Authentication prompt. Interesting thing is, that the Windows Authentication prompt is not coming from ADFS but from the CRM itself. ADFS has Windows Authentication turned off completely (for both Intranet and Extranet).

    The application is available from here: www.microsoft.com/.../9NBLGGH4RFQP

  • syscon Profile Picture
    syscon 25 on at

    Sorry for digging up an old thread, did you end up with any solutions? We are currently stuck with this and unable to push an upgrade (assuming an upgrade "may" have addressed the issue).

    Have read elsewhere that disabling windows auth in crm servie directory helps but testing this, it made no difference (theres still 3 auth headers and IE 11 is not following the bearer auth link, which to my knowledge it should based on auth order / it is the first auth link on the response)

    Matty

  • Verified answer
    Jan Hajek Profile Picture
    Jan Hajek 50 on at

    Yeah, we ended up with a solution. Basically, the Windows Authentication prompt is coming from Dynamics directly rather than IIS. Basically, Dynamics sends multiple WWW-Authenticate headers with all authentication options and for some reason, the application defaults to Windows Authentication, while in my opinion, it should prefer the OAuth2 (ADFS) method as primary. The solution for us was to rewrite all WWW-Authenticate headers sent from the server to client (in IIS as outbound rewrite) and only send the OAuth2 WWW-Authenticate header. If you need specific sample, I can get my collegue to provide it here.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Congratulations to the November Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

#1
SA-08121319-0 Profile Picture

SA-08121319-0 4

#1
Calum MacFarlane Profile Picture

Calum MacFarlane 4

#3
Alex Fun Wei Jie Profile Picture

Alex Fun Wei Jie 2

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans