Microsoft CRM and AD FS

(0) Share

Report

Posted on by Community Member

Hello Users, first thank you for read this post.

My question is if it possible to set up two ADFS into CRM, because i set up my internal ADFS and work ok, but now i have to publish my CRM and when the users try to pen the crm, it try to reach out the internal AD FS not the Internet AD FS.

How can i resolve this problem ??

*This post is locked for comments

I have the same question (0)

All responses (3)

Answers (0)

Suggested answer

Nick.Doelman 1,947 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Let me start off by mentioning that I am NOT an ADFS expert... that being said I have been tasked a few times to setup ADFS and IFD (Internet facing deployment) for Dynamics CRM.

While Microsoft provides some information, I found this particular blog posting seems to nail down the steps to get it working internally and externally. Maybe reviewing these steps might help you isolate and resolve your problem.

www.interactivewebs.com/.../microsoft-crm-2011-how-to-configure-ifd-hosted-setup

Was this reply helpful? Yes No
Suggested answer

Colin V on at

Like (0)

Report
Copy link

Link copied!

Hi Alejandro, if you have 2 individual ADFS servers then this is not a correct setup of ADFS for the same domain as they each serve as a federation partner with their own databases. It would require CRM to allow 2 federated partners which it does not, even in the 2016 version. You will want to have 1 ADFS server/farm and then have an ADFS proxy for your external access. Internal DNS will point to your internal ADFS (non-proxy) and external DNS will point to the ADFS proxy. CRM will not care about the difference of your proxy vs. internal ADFS.

Take a look at this blog post from Pradeep - https://pradeeppawarblog.wordpress.com/2013/10/15/configure-internet-facing-deployment-for-crm-2011-server-in-more-secure-way-with-adfs-proxy/

What is ADFS Proxy - https://blogs.technet.microsoft.com/askds/2012/01/05/understanding-the-ad-fs-2-0-proxy/

Was this reply helpful? Yes No
Suggested answer

Abarao Bhople 445 on at

Like (0)

Report
Copy link

Link copied!

Hi Alejandro,

while configuring Claims base Authantication provide the federation metada URL of your Internet facing ADFS instead of Internal ADFS metadata URL once you configured Claims base Authantication , check it is working or not ,once it done then configure IFD and test it shuold be redirect to your internet ADFS .

Thank you !

Abarao Bhople

Was this reply helpful? Yes No