Dynamics Community Forum Thread Details

What is the usage of Home Realm URL

I have installed Dynamics CRM and set IFD enviroment. When I try to connect the SiteMap Editor (3rd party app) without Home Realm URL, I can connect to Dynamics CRM successfully. In this part I have a question. What is the Home Realm URL? I was able to find a description on a website as follows.

Home realm url : used only with IFD. If external STS provider is required

I didn't understand the description. Please let me know when or what circumstances I use the Home Realm URL.

Thanks.

Where I work, our on-prem CRM is hosted by a third party but we want our users to authenticate against our Active Directory, so we have federated our AD with our hosting provider's AD. This means that when a user enters our CRM URL into a browser, they are given two choices for domains against which to authenticate: our AD and our host's AD. Selecting either will direct a user towards that specific AD for single sign-on. This screen, I believe, is referred to as the home realm discovery.

Our users will, without exception, log into our CRM org using our companies' AD. As a system administrator, I use both.

When connecting against our CRM org using the SDK or other third party tool, I must use my credentials in our host's AD, otherwise I can't connect, as these tools have no way of routing my credentials to the correct AD instance; they are sent to the default org (our host). When logging in as a user would, through the website, I authenticate against my companies' AD.

I believe the home realm discovery is used to denote the domain against which you wish to authenticate. The "home realm" being the AD that possesses and can authenticate your credentials.

Quick Links