web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Microsoft Dynamics CRM (Archived) / Authentication loop wi...
Microsoft Dynamics CRM (Archived)

Authentication loop with Internet Explorer and Claims-Based Authentication. With Chrome there is no problem

(0) ShareShare
ReportReport
Posted on by Community Member

Hello,

I've setted up a new CRM 2016 server and configured the Claims-Based Authentication.

On Chrome and Firefox everything works perfect. But with Internet Explorer it stucks in a loop with the authentiction to the adfs server. After a view seconds it redirects to an error page.

Here is the error log.

•Activity ID: 00000000-0000-0000-9e00-0080000000be
•Relying party: crmUrl.com
•Error time: Tue, 13 Sep 2016 12:36:52 GMT
•Cookie: enabled
•User agent string: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.3; WOW64; Trident/7.0; .NET4.0E; .NET4.0C)

The strange thing is, that the user agent is Mozilla, but there is no Mozilla instalation on the PC.

We get that error message on any PC in our company. 

Additional, the CRM Website is also not reachable with the Internet Explorer from the CRM Server itself. With Chrome it works.

The URL from the AD FS Server and the CRM Server are already added to the Local Intranet security zone.

*This post is locked for comments

I have the same question (0)
  • Community Member Profile Picture
    Community Member on at

    Hi Manfred

    Did you every get this solved?

    Please let us know the solution. We are facing the exact same Problem.

    Thanks,
    Beat

  • Abarao Bhople Profile Picture
    Abarao Bhople 445 on at

    Hi Beat -G ,

    Assuming that , you are facing same problem as Manfred was facing.

    could you please check below things.

    Try to access your ADFS Login and Fedetation metadata URL by using Internet Explorer .

    1) https://youradfs service name.yourdomain.com/adfs/ls/idpinitiatedsignon.aspx

    2) https://youradfs service name.yourdomain.com/Federationmetadata/2007-06/federationmetadata.xml

    let us know if you are able to access above URL in IE.

    Thank you !

    Abarao Bhople

  • Community Member Profile Picture
    Community Member on at

    Yes, I can access both url's.

  • Community Member Profile Picture
    Community Member on at

    Problem solved. The reason was that we had 2 web applications. One was a subdomain of the other and therefore IE tried to reuse the FedAuth cookie (which was not valid for the URL). Changing the FedAuth cookie name on one of the web applications solved the problem.

  • Anirban Profile Picture
    Anirban 5 on at

    This issue is related to token binding on ADFS. Try below command which will resolve this issue.

    Set-ADFSProperties -IgnoreTokenBinding $true

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Congratulations to the November Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

#1
SA-08121319-0 Profile Picture

SA-08121319-0 4

#1
Calum MacFarlane Profile Picture

Calum MacFarlane 4

#3
Alex Fun Wei Jie Profile Picture

Alex Fun Wei Jie 2

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans