Hello,
I've setted up a new CRM 2016 server and configured the Claims-Based Authentication.
On Chrome and Firefox everything works perfect. But with Internet Explorer it stucks in a loop with the authentiction to the adfs server. After a view seconds it redirects to an error page.
Here is the error log.
•Activity ID: 00000000-0000-0000-9e00-0080000000be •Relying party: crmUrl.com •Error time: Tue, 13 Sep 2016 12:36:52 GMT •Cookie: enabled •User agent string: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.3; WOW64; Trident/7.0; .NET4.0E; .NET4.0C)
The strange thing is, that the user agent is Mozilla, but there is no Mozilla instalation on the PC.
We get that error message on any PC in our company.
Additional, the CRM Website is also not reachable with the Internet Explorer from the CRM Server itself. With Chrome it works.
The URL from the AD FS Server and the CRM Server are already added to the Local Intranet security zone.
*This post is locked for comments
This issue is related to token binding on ADFS. Try below command which will resolve this issue.
Set-ADFSProperties -IgnoreTokenBinding $true
Problem solved. The reason was that we had 2 web applications. One was a subdomain of the other and therefore IE tried to reuse the FedAuth cookie (which was not valid for the URL). Changing the FedAuth cookie name on one of the web applications solved the problem.
Yes, I can access both url's.
Hi Beat -G ,
Assuming that , you are facing same problem as Manfred was facing.
could you please check below things.
Try to access your ADFS Login and Fedetation metadata URL by using Internet Explorer .
1) https://youradfs service name.yourdomain.com/adfs/ls/idpinitiatedsignon.aspx
2) https://youradfs service name.yourdomain.com/Federationmetadata/2007-06/federationmetadata.xml
let us know if you are able to access above URL in IE.
Thank you !
Abarao Bhople
Hi Manfred
Did you every get this solved?
Please let us know the solution. We are facing the exact same Problem.
Thanks,
Beat
Stay up to date on forum activity by subscribing. You can also customize your in-app and email Notification settings across all subscriptions.
André Arnaud de Cal... 291,240 Super User 2024 Season 2
Martin Dráb 230,149 Most Valuable Professional
nmaenpaa 101,156