CRM Portal external authentication with custom provider using SAML2

(0) Share

Report

Posted on by PranavShroti

4,510

Dear All,

We have a requirement where in we have to authenticate CRM community portal users using custom in-house authentication provider using SAML2 (not oAuth2).

Custom provider is working fine with salesforce community portal using SAML2 already.

Running through multiple blogs and administrative guide of portal below are my findings:
1. Apart from "ADFS" and "Shibboleth Identity Provider" there are no examples and samples available for any third party providers.
2. Settings are different for each custom identity provider.
3. For setting up SAML2 this URL is referred: "https://portal.contoso.com/signin-saml2" I am not sure whether this is what is SAML2 url.

Can anyone suggest how to approach this.

Thanks in advance.

Pranav

*This post is locked for comments

I have the same question (0)

All responses (6)

Answers (0)

imKtripathy on at

Like (0)

Report
Copy link

Link copied!

HI Pranav,

CRM Portals support SAML2 and https://portal.contoso.com/signin-saml2 is the correct url, The support for SAML 2.0 is limited to IDP initiated profile only and doesn't have support for SP-initiated authentication.

Thanks,

Kunal

Was this reply helpful? Yes No
PranavShroti 4,510 on at

Like (0)

Report
Copy link

Link copied!

Thanks for the response Kunal.

We have hosted our server on Azure which provides end points for applications hosted.

FEDERATION METADATA DOCUMENT

https://login.windows.net/<<AppID>>/federationmetadata/2007-06/federationmetadata.xml

SAML

SAML-P SIGN-ON ENDPOINT

https://login.windows.net/<<AppID>>

SAML-P SIGN-OUT ENDPOINT

https://login.windows.net/<<AppID>>/saml2

OAUTH 2.0 TOKEN ENDPOINT

https://login.windows.net/<<AppID>>/oauth2/token

OAUTH 2.0 AUTHORIZATION ENDPOINT

https://login.windows.net/<<AppID>>/oauth2/authorize

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report
Copy link

Link copied!

We are getting page not found within the portal

when usinh clienportalname.microsoftcrmportals.com/signin-saml2

Any ideas?

Was this reply helpful? Yes No
Suggested answer

imKtripathy on at

Like (0)

Report
Copy link

Link copied!

Hi David, validate if your auth provider is using POST method while sending the response back to the portal.

Was this reply helpful? Yes No
Community Member on at

Like (1)

Report
Copy link

Link copied!

Hi there,

We are currently seeing the exact same behaviour.

- We are successfully authenticating at our IDP and then seeing a SAML 2.0 assertion get POSTED back to our Adoxio xRM Portal's /signin-saml2 page

- But then we get the Custom Portal "Page Not Found" page displayed, exactly as per your screenshot.

We're trying to debug everything possible, but there's not a lot of logging available to help tell us why the Adoxio xRM Portal isn't happy.

Can anyone help?

Was this reply helpful? Yes No
sam hajjar 25 on at

Like (0)

Report
Copy link

Link copied!

Dear all,

Have you been able to advance in that matter?

Can you describe adopted solution or share some tips.

Thanks,

Sam

Was this reply helpful? Yes No