Hi
Please follow the below possible approach
Solution:1
192.168.3.39=CRM Server
192.168.3.43=ADF server
192.168.3.39 {CRM Organization}. “issued to”
192.168.3.43 ADFS-FederationName. “issued to”
192.168.3.39 auth. “issued to”
192.168.3.39 internalcrm. “issued to”
Create above URL in the DNS entry as “Host A” record should not “C Alias Name”
Solution:2
Add the https://federationServiceName."issuedto" or *."issuedto" sites to your Local intranet sites in your browser.
federationServiceName: Name defined at the time of ADFS installation
issuedto: certificate issue to
eg:
https://sts1.contoso.com add this url in your IE local intranet site
Solution:3
Cause:
You have wrongly configured the spn between CRM and ADFS.
Here CRM, ADFS and SQL installed on separate server
ADFS server: domain\adfs01
CRM server: domain\crm01
SQL server: domain\sql02
I have check all the server and ADFS logged in(service account) against below command
Setspn -l domain\adfs01
Setspn -l domain\ crm01
Setspn -l domain\ sql02
Setspn -l domain\CRMServiceaccount or CRM installable account
Check is there any http/federationServiceName.Issuedto or federationservicename.issuedto is added
federationServiceName: Name defined at the time of ADFS installation
issuedto: certificate issue to
if it is then remove it
setspn -d http/federationServiceName.Issuedto domain\adfs01
federationServiceName: Name defined at the time of ADFS installation
issuedto: certificate issue to
Then login with internal CRM URL.
