CRM 2016 and Sharepoint (both on premise) integration - almost there

(1) Share

Report

Posted on by Community Member

https://technet.microsoft.com/en-us/library/dn949332.aspx#Set%20up%20server-based%20integration%20with%20Dynamics%20CRM%20and%20SharePoint

Been following the MS guide above. When I get to the "Prepare the SharePoint server for CRM Server authentication" line, I'm having a few issues. When I run New-SPTrustedSecurityTokenIssuer –Name "crm" –IsTrustBroker:$false –MetadataEndpoint https://(servernamehere).(domainhere).com/XrmServices/2015/metadataendpoint.svc/json?orgName=(OrgNameHere) I get an error I can't seem to find anybody else getting an error on.

"New-SPTrustedSecurityTokenIssuer: The remote server returned an error: (400) Bad Request."

Any ideas? If you need more info, just ask! Thank you!

*This post is locked for comments

I have the same question (0)

All responses (4)

Answers (0)

Drew Poggemann 4 on at

Like (0)

Report

Hi CRMUser12, I am "hoping" this helps but not sure... Apologize if not...

samlman.wordpress.com/.../400-bad-request-error-with-adfs

Thanks,

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Unfortunately I am not using an ADFS setup as that link implies. Regardless I still gave it a look. He mentions going to ADSI Edit and looking for a service account that appears to be created here:

.\CertificateReconfiguration.ps1 -certificateFile c:\Personalcertfile.pfx -password personal_certfile_password -updateCrm -certificateType S2STokenIssuer -serviceAccount contoso\CRMAsyncService -storeFindType FindBySubjectDistinguishedName

According to the directions in the original post, the service account (shown here as "contoso\crmasynchservice") can be a domain account or it can just be Network Service. In my case I just did Network Service so I don't know if that will show up in ADSI Edit.

Thanks for the link though!

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Not sure if you got this resolved yet, i just had the same issue and it had to do with the "SharePoint" work e-mail address not being set in CRM and respectively in Sharepoint.

In the CRM User Form add the "SharePoint Email Address" and populate it for your install accounts in my case SPAdmin service account and CRMAdmin service accounts. No go to share point and make sure you add the "work e-mail" to those same users and make sure it matches up. There are a 1000 ways to do this in SP, however if you access to the accounts you can just go and edit them under the "Profile" feature (log in as user). You will likely have to central admin > Application management > manage service applications >user profile service >manage> manage user properties and allow users to be able to make changes to that field.

Good luck...server side integration is easy.....when its not on prem :-P

Was this reply helpful? Yes No
Suggested answer

Aric Levin - MVP 30,190 Moderator on at

Like (0)

Report

Your metadata endpoint is not supposed to be 2015, but 2011. Although you are using a higher version, you are still using the 2011 endpoint.

See here for a list of endpoint urls:

crmbm.blogspot.com/.../crm-webservices.html

Was this reply helpful? Yes No