Dynamics CRM On-Premise - Multiple Domain Access

(0) Share

Report

Posted on by Ozarour

630

Hi,

Is it possible to integrate dynamics CRM with more that one active directory, so that two users from two different active directories can be CRM users ?

Thank you.

*This post is locked for comments

I have the same question (0)

All responses (4)

Answers (1)

Suggested answer

Ragnar Hilmarsson 3,427 on at

Like (1)

Report

Hi

Yes you can add users from trusted domains

technet.microsoft.com/.../dn531106.aspx

Was this reply helpful? Yes No
Ozarour 630 on at

Like (0)

Report

Hi and Thank you for your quick reply,

I don't have enough information about trusted domains, but do you mean that there should be something I have to do on CRM server to identify those domains? Is this related to IFD installation ?

Thanks in advance.

Was this reply helpful? Yes No
Verified answer

Manoj Batchu 1,691 on at

Like (0)

Report

Hello,

The computers that run Microsoft Dynamics CRM Server roles and the computer that runs SQL Server, where the Microsoft Dynamics CRM databases are located, must be in the same Active Directory domain.

The User Service account and Microsoft Dynamics CRM security groups (PrivUserGroup, SQLAccessGroup, ReportingGroup, and PrivReportingGroup) must be in the same domain as the computer that is running Microsoft Dynamics CRM.

Assume there are 3 Domains - Domain1, Domain2. And a Two-way trust is configured between these two domains.

All the CRM Servers should be joined to only one domain (either 1 or 2).

And you don't need IFD for this, you can have a On-premise deployment with Trust Configured between the Domains for User access.

For users who access Microsoft Dynamics CRM from another domain and are not using claims-based authentication, a one-way trust must exist in which the domain where the Microsoft Dynamics CRM Server is located trusts the domain where the users are located.

Note: If domains are part of same forest, a two-way domain trust exists between them by default. If they are part of different forests, you need to establish a trust manually.

For more information, please go through the link below.

CRM supported configurations - technet.microsoft.com/.../hh699704.aspx

Create a two-way, forest trust for both sides of the trust - technet.microsoft.com/.../cc778851(v=ws.10).aspx

Was this reply helpful? Yes No
Salkurdi on at

Like (0)

Report

Hello Manoj,

If IFD is enabled can external "Non Domain" users authenticate ? how can I use the federation services to authenticate customers or partners?

Thanks

Was this reply helpful? Yes No