2,725
Hi,
We are moving our CRM from on-prem to online.
I have couple of questions for Online CRM.
1)Can we control the access of CRM from a specific network only.We dont want user to access CRM from unauthenticated network.
2)Within authenticated network,can we use windows security so it does ask for credentials every time.
*This post is locked for comments
Thanks Ben,that was helpful
1) As I stated above you cannot - what you can do is restrict access on user authentication with a check that the user is in the expected IP range(s). However, once authenticated if they have a mobile device they can continue to work anywhere until the session has ended.
You cannot however do that within Dynamics 365 as it is SAAS and you no longer have access to the underlining web server where you could previous run your security restrictions.
2) You will need to read the links I suggested and follow the suggestions. Automatic login without prompts is possible but it is done via Active Directory, Azure Active Directory, an on-premise security token process (probably via Active Directory Federation services) AND requires Active Directory Synchronisation.
You really need to be talking to your network and security teams to implement this as it is complex issue with a lot of considerations..
Thanks Ben.
1)In PAAS/IAAS,we can control IP but how would it work if the CRM organisation is online.How could we control authenticated IP there?
2)I know within Dynamics 365 suite everything is SSO but I want when a user login from office,it should not ask for credentials.Could it be automatically logged in by passing credentials from browser or something.
1) You can restrict the ip address a user is logging in but not where they subsequent requests come from see docs.microsoft.com/.../restrict-access-online-trusted-ip-rules and note the explicit explanation
When a Dynamics 365 user signs in into Dynamics 365 using their laptop from their office and establishes a Dynamics 365 session, the user can continue to access Dynamics 365 after leaving the office until the Dynamics 365 session timeout expires.
2) You can find Microsoft's documentation regarding Single sign on starting at msdn.microsoft.com/.../hh675418.aspx and technet.microsoft.com/.../hh967643.aspx
Stay up to date on forum activity by subscribing. You can also customize your in-app and email Notification settings across all subscriptions.
#1
André Arnaud de Cal...
291,280
Super User 2024 Season 2
#2
Martin Dráb
230,214
Most Valuable Professional
#3
nmaenpaa
101,156
Share
Report
All responses (
Answers (