ADFS Forms authentication not working for CRM 2013

(0) Share

Report

Posted on by Community Member

I have CRM 2013 setup and working with claims based auth and IDF enabled with ADFS 2.0. It all works both internally and externally, however I noticed when I tried using the IOS app for CRM it just landed on a blank page with no login screen, that blank page should be showing the ADFS login form. What it looks like is ADFS is treating the external auth as internal auth.

Anyone got any ideas?

*This post is locked for comments

I have the same question (0)

All responses (14)

Answers (1)

Suggested answer

Pradeep Pawar 2,930 on at

Like (0)

Report

You may refer this link for browser compatibility on mac:

https://community.dynamics.com/crm/b/crmcustomereffective/archive/2013/10/14/crm-2013-and-working-browser-independent.aspx

Let me know more details about mac version and browser versions etc.

Pradeep P

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

So I'm using MS Dynamics CRM ipad app on IOS 7.

Going to https://crm.OurUrl.com/ in Safari on the the ipad works just fine, i'm able to login with the login prompt (not a login form) and use crm in the browser, its just the App that doesn't work, and doesn't work on iphone 5 or 4 with the same App.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

This is the app I'm using:

itunes.apple.com/.../id678800460

This app, needs IDF in order to work. However I have Claims auth and IDF both setup for CRM 2013 using ADFS 2.0, however the app doesn't or can't see the forms based auth screen... all it shows is blank screen where the login screen should be. And I have a feeling that ADFS keeps treating all auth as internal auth and immediately shows the pop up prompt for login instead of the forms based login which the ipad/iphone apps need.

Any ideas?

Was this reply helpful? Yes No
Verified answer

Community Member on at

Like (1)

Report

Found my answer in the CRM IG v6.

1. Log on to the AD FS server as an administrator.

2. Open the ADFS management wizard.

3. Click Authentication Policies > Primary Authentication > Global Settings > Authentication Methods > Edit.

4. Click (check) Form Based Authentication on the Intranet tab.

then configure the Oauth

1. Log on to the Microsoft Dynamics CRM server as an administrator.

2. In a Windows PowerShell console window, run the following script.

Add-PSSnapin Microsoft.Crm.PowerShell

$fedurl = Get-CrmSetting -SettingType ClaimsSettings

$fedurl.FederationProviderType = 1

Set-CrmSetting $fedurl

Then Register the client apps

The mobile client apps for the Apple iPad and Windows 8 tablets and phone must be registered with AD FS.

1. Log on to the AD FS server as administrator.

2. In a PowerShell window, execute the following command.

Add-AdfsClient -ClientId ce9f9f18-dd0c-473e-b9b2-47812435e20d -Name "Dynamics CRM Mobile Companion" -RedirectUri ms-app://s-1-15-2-2572088110-3042588940-2540752943-3284303419-1153817965-2476348055-1136196650/, ms-app://s-1-15-2-1485522525-4007745683-1678507804-3543888355-3439506781-4236676907-2823480090/, urn:ietf:wg:oauth:2.0:oob

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Did you get the app working externally in the end?

Was this reply helpful? Yes No
Suggested answer

Robert Kennedy 5 on at

Like (0)

Report

Thanks - that worked for me

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

What if you are working on the iphone and on Data not wifi? we don't get to the ADFS screen.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Thanks for the information... It helped me get one step closer, but I'm still not there yet. Can you please tell me where/how you got the Client Id, and the RedirecUri? Are those values above specific to you? Thanks again!

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Nope, I think those are the ID's of the app itself. I don't recall those being unique.

Was this reply helpful? Yes No
Joe Woltering 12,163 on at

Like (0)

Report

Where do you access the ADFS Authentication Policies in this step? (2008 R2)

3. Click Authentication Policies > Primary Authentication > Global Settings > Authentication Methods > Edit.

4. Click (check) Form Based Authentication on the Intranet tab.

Was this reply helpful? Yes No