Skip to main content

Notifications

Microsoft Dynamics CRM (Archived)

Authentication loop with Internet Explorer and Claims-Based Authentication. With Chrome there is no problem

Posted on by Microsoft Employee

Hello,

I've setted up a new CRM 2016 server and configured the Claims-Based Authentication.

On Chrome and Firefox everything works perfect. But with Internet Explorer it stucks in a loop with the authentiction to the adfs server. After a view seconds it redirects to an error page.

Here is the error log.

•Activity ID: 00000000-0000-0000-9e00-0080000000be
•Relying party: crmUrl.com
•Error time: Tue, 13 Sep 2016 12:36:52 GMT
•Cookie: enabled
•User agent string: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.3; WOW64; Trident/7.0; .NET4.0E; .NET4.0C)

The strange thing is, that the user agent is Mozilla, but there is no Mozilla instalation on the PC.

We get that error message on any PC in our company. 

Additional, the CRM Website is also not reachable with the Internet Explorer from the CRM Server itself. With Chrome it works.

The URL from the AD FS Server and the CRM Server are already added to the Local Intranet security zone.

*This post is locked for comments

  • Anirban Profile Picture
    Anirban 5 on at
    RE: Authentication loop with Internet Explorer and Claims-Based Authentication. With Chrome there is no problem

    This issue is related to token binding on ADFS. Try below command which will resolve this issue.

    Set-ADFSProperties -IgnoreTokenBinding $true

  • Community Member Profile Picture
    Community Member Microsoft Employee on at
    RE: Authentication loop with Internet Explorer and Claims-Based Authentication. With Chrome there is no problem

    Problem solved. The reason was that we had 2 web applications. One was a subdomain of the other and therefore IE tried to reuse the FedAuth cookie (which was not valid for the URL). Changing the FedAuth cookie name on one of the web applications solved the problem.

  • Community Member Profile Picture
    Community Member Microsoft Employee on at
    RE: Authentication loop with Internet Explorer and Claims-Based Authentication. With Chrome there is no problem

    Yes, I can access both url's.

  • Abarao Bhople Profile Picture
    Abarao Bhople 445 on at
    RE: Authentication loop with Internet Explorer and Claims-Based Authentication. With Chrome there is no problem

    Hi Beat -G ,

    Assuming that , you are facing same problem as Manfred was facing.

    could you please check below things.

    Try to access your ADFS Login and Fedetation metadata URL by using Internet Explorer .

    1) https://youradfs service name.yourdomain.com/adfs/ls/idpinitiatedsignon.aspx

    2) https://youradfs service name.yourdomain.com/Federationmetadata/2007-06/federationmetadata.xml

    let us know if you are able to access above URL in IE.

    Thank you !

    Abarao Bhople

  • Community Member Profile Picture
    Community Member Microsoft Employee on at
    RE: Authentication loop with Internet Explorer and Claims-Based Authentication. With Chrome there is no problem

    Hi Manfred

    Did you every get this solved?

    Please let us know the solution. We are facing the exact same Problem.

    Thanks,
    Beat

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

December Spotlight Star - Muhammad Affan

Congratulations to a top community star!

Top 10 leaders for November!

Congratulations to our November super stars!

Community AMA December 12th

Join us as we continue to demystify the Dynamics 365 Contact Center

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,240 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 230,149 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans