Connecting CRM Dynamics Onpremise with Azure AD including Outlook Client

(0) Share

Report

Posted on by Community Member

Hi Everyone,

We currently have a scenario where we need to connect an OnPremise CRM Dynamics 365 with an ADFS (IFD) that has an Azure AD configured as claims provider trust. This works fine for the web application to connect by transforming the Name to the UPN claim in ADFS, but we fail to get the Outlook client working because the Home Realm for Azure AD is not supported by the outlook client or fails at least.

Therefore we are now testing to connect the CRM instance to Azure AD directly instead of via an ADFS to see if we can get the outlook client working but with no success.

There is another old post that has a similar request but it is not clear nor documented how people got it working (https://community.dynamics.com/crm/f/117/t/163064).

So the questions are:

* Is it supported to have a CRM IFD connected to ADFS with an Azure AD as claims provider trust with the Outlook Client.

* If not is it supported to connect CRM IFD to Azure AD as STS

Any help would be appreciated.

Regards,

Michael

*This post is locked for comments

I have the same question (0)

All responses (4)

Answers (1)

Verified answer

Tomas Prokop 590 on at

Like (0)

Report
Hello Michael,

we have the ADFS scenario with AAD working. It works for both Dynamics 365 App for Outlook and the old Outlook client.

Here is what you can try:

Make sure you have setup ADFS clients correctly.

Dynamics CRM for Outlook:

Add-AdfsClient -ClientId 2f29638c-34d4-4cf2-a16a-7caf612cee15 -Name "Dynamics CRM Outlook Client" -RedirectUri app://6BC88131-F2F5-4C86-90E1-3B710C5E308C/

Dynamics 365 App for Outlook (orgs may have different Client IDs):

Set ADFS Authentication Methods to Forms Authentication

Configure OAuth Provider

$ClaimsSettings = Get-CrmSetting -SettingType OAuthClaimsSettings $ClaimsSettings.Enabled = $true Set-CrmSetting -Setting $ClaimsSettings

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Hi Tomas,

Thanks for the quick response and taking the time to respond with such detail.

We have applied the changes and it works, what we were missing was the client id registration for the outlook client.

Regards,

Michael

Was this reply helpful? Yes No
Suggested answer

gdas 50,091 Moderator on at

Like (0)

Report

Hi Michael,

Could you please check below references -

msdn.microsoft.com/.../mt622431.aspx

Hope this helps.

Was this reply helpful? Yes No
Suggested answer

Jan Hajek 50 on at

Like (1)

Report

Hi, we have recently discovered a way to connect Dynamics 365 directly with Azure AD without the need of ADFS - please have a look here: blog.thenetw.org/.../using-azure-active-directory-for-sso-with-dynamics-365-on-premise

However, as you will find explained in the article, it is not an advised solution and the best approach is to use Azure AD proxied through ADFS as Tomas Prokop has already explained below. Full article about that approach is available here: blog.thenetw.org/.../settings-up-adfs-with-azure-ad-as-dynamics-365-identity-provider

Was this reply helpful? Yes No