Microsoft Dynamics 365 | Integration, Dataverse...

slow when login crm (CrmException: The current organization id could not be determined.)

(0) Share

Report

Posted on by CU06031402-0

We are encountering an issue with our Microsoft Dynamics 365 On-Premises environment where users cannot access the organization URL.

Environment Details:

Product: Microsoft Dynamics 365 On-Premises
Version: 9.1.42
Server: D365.test.local
Organization Name: test-01
URL: https://192.168.7.181/test-01
IIS Version: IIS 10

Issue Description:
When attempting to access the organization URL, the application fails to load and generates an ASP.NET exception in the Windows Event Viewer.

Event Log Details:
Log Name: Application
Source: ASP.NET 4.0.30319.0
Event ID: 1309
Event Code: 3005

Exception:

Log Name: Application
Source: ASP.NET 4.0.30319.0
Date: 3/5/2026 10:55:03 PM
Event ID: 1309
Task Category: Web Event
Level: Warning
Keywords: Classic
User: N/A
Computer: D365.test.local
Description:
Event code: 3005
Event message: An unhandled exception has occurred.
Event time: 3/5/2026 10:55:03 PM
Event time (UTC): 3/5/2026 8:55:03 PM
Event ID: 3bbfd3b4bde5467381b9f23b2dccef4f
Event sequence: 271
Event occurrence: 2
Event detail code: 0

Application information:
Application domain: /LM/W3SVC/1/ROOT-1-134172169416366596
Trust level: Full
Application Virtual Path: /
Application Path: C:\Program Files\Dynamics 365\CRMWeb\
Machine name: D365

Process information:
Process ID: 9448
Process name: w3wp.exe
Account name: test\administrator

Exception information:
Exception type: CrmException
Exception message: The current organization id could not be determined.
at Microsoft.Crm.Application.Security.UserInformationIdentity.get_OrganizationId()
at Microsoft.Crm.CrmCache`1.InternalAddEntry(String cacheKey, Object value, String[] dependencyKeys, IOrganizationContext context)
at Microsoft.Crm.CrmCache`1.AddEntryNoLock(String key, TValue value, String[] dependencyKeys, IOrganizationContext context)
at Microsoft.Crm.Caching.BasicCrmCache`2.AddEntityFromLookupInternal(String key, TValue value, IOrganizationContext context)
at Microsoft.Crm.Caching.BasicCrmCache`2.AddEntryFromLookupCallback(String key, TValue value, IOrganizationContext context, Object parameter)
at Microsoft.Crm.CrmCache`1.AddEntry(String key, TValue value, IOrganizationContext context, AddEntryCallback`1 callback, Object callbackParameter)
at Microsoft.Crm.Caching.BasicCrmCache`2.AddEntryFromLookup(String key, TValue value, IOrganizationContext context)
at Microsoft.Crm.Caching.BasicCrmCache`2.LookupEntry(TKey key, IOrganizationContext context)
at Microsoft.Crm.Application.Themes.Theme.get_Current()
at ASP.test_01__common_styles_theme_css_aspx.__Render__control1(HtmlTextWriter __w, Control parameterContainer)
at System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children)
at System.Web.UI.Page.Render(HtmlTextWriter writer)
at System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter)
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

Request information:
Request URL: https://192.168.7.181:443/test-01/_common/styles/theme.css.aspx?lcid=1033&ver=-533910750
Request path: /test-01/_common/styles/theme.css.aspx
User host address: 192.168.7.181
User:
Is authenticated: False
Authentication Type:
Thread account name: test\administrator

the users login but after 40 sec of slow

Note : attached screen shots of the current state

1.PNG

2.PNG

Your file is currently under scan for potential threats. Please wait while we review it for any viruses or malicious content.

Categories:

Dynamics 365 general

I have the same question (0)

All responses (14)

Answers (0)

Sort by

Suggested answer

11manish 649 on at

Like (0)

Report
Copy link

Link copied!
The error you’re seeing in Microsoft Dynamics 365:

CrmException: The current organization id could not be determined

combined with very slow login (~40 seconds) usually indicates a configuration or authentication resolution problem, not a simple IIS error.

This issue typically occurs when CRM cannot resolve the organization context during the request pipeline.

Most Common Causes in Dynamics 365 On-Prem 9.1

Incorrect CRM Deployment URL Binding (Very Common)

Your organization URL is:

https://192.168.7.181/test-01

But Dynamics expects access using the server hostname, not the IP.

Example:

https://D365.test.local/test-01

CRM resolves the organization using host headers + deployment configuration.

Using an IP address often breaks organization resolution.

Fix

Avoid IP-based URLs.

CRM Website Authentication Configuration

Verify IIS authentication settings.

CRMAppPool Identity Problem

Your log shows:

Process account: test\administrator

This is not recommended.

CRMAppPool should run under:

Network Service

or a dedicated CRM service account.

Missing Organization Mapping in Deployment Manager

Open Microsoft Dynamics 365 Deployment Manager

Check:

Organizations
→ test-01

Verify:

Organization is Enabled

State = Ready

If not:

Right Click → Enable

DNS Resolution Delay (Causes 40s Login Delay)

The 40 second delay strongly suggests DNS resolution issues.

Test from the CRM server:

ping D365.test.local

nslookup D365.test.local

Also test reverse lookup:

nslookup 192.168.7.181

If reverse DNS fails → authentication delays occur.

Fix by adding DNS A and PTR records.

SPN (Kerberos) Issues

If using Windows Authentication:

Check SPN:

setspn -L D365

If CRMAppPool uses domain account:

setspn -S HTTP/D365.test.local test\crmservice

CRM Cache Issue

Sometimes CRM cache causes this error.

Clear CRM cache:

C:\Program Files\Dynamics 365\CRMWeb\Server\bin\assembly

Restart:

IISRESET

Was this reply helpful? Yes No
CU06031402-0 15 on at

Like (0)

Report
Copy link

Link copied!

Still same issue exists as i try login with fqdn and still issue repeated

Was this reply helpful? Yes No
CU06031402-0 15 on at

Like (0)

Report
Copy link

Link copied!

No change

Was this reply helpful? Yes No
CU06031402-0 15 on at

Like (0)

Report
Copy link

Link copied!

any updates?

Was this reply helpful? Yes No
CU14031118-1 8 on at

Like (0)

Report
Copy link

Link copied!

@11manish @Pallavi Phade @Abhilash Warrier could you help me

i have done all steps but still get the same issue

Was this reply helpful? Yes No
11manish 649 on at

Like (0)

Report
Copy link

Link copied!
Hi CU06031402-0 ,

As per understanding, Your 40 second delay before login usually indicates:

DNS reverse lookup delay

SQL connectivity delay

Authentication negotiation

As per above statement, you have verified above my instructions. then I will suggest you to open Microsoft support ticket.

They will help to investigate of real root cause.

Was this reply helpful? Yes No
CU14031118-1 8 on at

Like (0)

Report
Copy link

Link copied!

how can u open ticket as my server is test before applying on prod and my license is trial

Was this reply helpful? Yes No
CU06031402-0 15 on at

Like (0)

Report
Copy link

Link copied!

are there any updates can made for this issue as my client is impacted after upgrade to v9.1

Was this reply helpful? Yes No
Suggested answer

Assisted by AI

ManoVerse 1,125 Super User 2026 Season 1 on at

Like (2)

Report
Copy link

Link copied!

I am not the OnPremise expert here as did end to end implementation long before and not having any handy environment with me to give you with screenshot advise, This answer build with help of AI and with my existing knowledge , also I have asked in community if anyone can help for this issue ,

but try with below solution and let us know if this helps:

It occurs when Dynamics cannot resolve the Organization Context early in the request pipeline, usually during unauthenticated requests (CSS, theme, images) before login completes. The slow 30–40s delay is critical here.

This issue can be cause by authentication, SPN, IIS binding, or organization URL resolution failures, NOT corrupted CSS file

✅ Cause #1 – URL / Binding / Host Header Mismatch (MOST COMMON)

You are accessing CRM via:

https://192.168.7.181/test-01

But Dynamics 365 9.1 explicitly requires host‑header‑based access, not IP addresses, for proper organization resolution.

✅ Fix

Create a DNS A‑record:
crm.test.local → 192.168.7.181
Update IIS Binding:

Site: Microsoft Dynamics CRM
HTTPS
Host name: crm.test.local

Access CRM only via:https://crm.test.local/test-01

✅ Cause #2 – SPN / Kerberos Authentication Fallback (40‑Second Delay Confirms This)
Your log shows:
Is authenticated: False
Authentication Type:
Thread account: test\administrator

That 40‑second delay is classic NTLM fallback while Kerberos fails.
Microsoft confirms:

If Kerberos SPNs are missing or incorrect, CRM delays authentication before defaulting to NTLM, causing slow login and failed org resolution

✅ Fix (Required Even if Using NTLM)
Run as Domain Admin:
setspn -L test\administrator

Ensure SPNs exist for the CRM site account:
setspn -A HTTP/crm.test.local test\administrator

setspn -A HTTP/D365.test.local test\administrator
Then recycle app pool:
iisreset
✅ Expected result: login drops from 40s → <5 seconds, error disappears.

✅ Cause #3 – Claims / Windows Authentication Order Incorrect
Dynamics requires Windows Authentication providers in the correct order.
✅ Correct IIS Settings
CRM Web Site → Authentication

Setting Value

Anonymous Disabled

Windows Enabled

Providers (Order) Negotiate FIRST, NTLM second

Error with Service Endpoint after upgrade to 9.1 on premise

SQL & Service Account Permissions (Quick Check)
Verify CRMAppPool account:

Has db_owner on:

<ORGNAME>_MSCRM
MSCRM_CONFIG

Missing permissions can also cause cache failures.

Was this reply helpful? Yes No
CU06031402-0 15 on at

Like (0)

Report
Copy link

Link copied!

@manoverse

after dislable the Anonymous Authentication in step 3 i get this error :

Log Name: Application
Source: System.ServiceModel 4.0.0.0
Date: 4/18/2026 9:32:56 AM
Event ID: 3
Task Category: WebHost
Level: Error
Keywords: Classic
User: ITD0\administrator
Computer: D365.itd.local
Description:
WebHost failed to process a request. Sender Information: System.ServiceModel.ServiceHostingEnvironment+HostingManager/27746459 Exception: System.ServiceModel.ServiceActivationException: The service '/test-01/XRMServices/2011/Organization.svc' cannot be activated due to an exception during compilation. The exception message is: The authentication schemes configured on the host ('IntegratedWindowsAuthentication') do not allow those configured on the binding 'CustomBinding' ('Anonymous'). Please ensure that the SecurityMode is set to Transport or TransportCredentialOnly. Additionally, this may be resolved by changing the authentication schemes for this application through the IIS management tool, through the ServiceHost.Authentication.AuthenticationSchemes property, in the application configuration file at the <serviceAuthenticationManager> element, by updating the ClientCredentialType property on the binding, or by adjusting the AuthenticationScheme property on the HttpTransportBindingElement.. ---> System.NotSupportedException: The authentication schemes configured on the host ('IntegratedWindowsAuthentication') do not allow those configured on the binding 'CustomBinding' ('Anonymous'). Please ensure that the SecurityMode is set to Transport or TransportCredentialOnly. Additionally, this may be resolved by changing the authentication schemes for this application through the IIS management tool, through the ServiceHost.Authentication.AuthenticationSchemes property, in the application configuration file at the <serviceAuthenticationManager> element, by updating the ClientCredentialType property on the binding, or by adjusting the AuthenticationScheme property on the HttpTransportBindingElement.
at System.ServiceModel.Channels.HttpTransportBindingElement.UpdateAuthenticationSchemes(BindingContext context)
at System.ServiceModel.Channels.HttpTransportBindingElement.BuildChannelListener[TChannel](BindingContext context)
at System.ServiceModel.Channels.DatagramChannelDemuxer`2..ctor(BindingContext context)
at System.ServiceModel.Channels.ChannelDemuxer.GetTypedDemuxer(Type channelType, BindingContext context)
at System.ServiceModel.Channels.ChannelDemuxer.BuildChannelListener[TChannel](BindingContext context, ChannelDemuxerFilter filter)
at System.ServiceModel.Channels.ChannelBuilder.BuildChannelListener[TChannel]()
at System.ServiceModel.Channels.SecurityChannelListener`1.InitializeListener(ChannelBuilder channelBuilder)
at System.ServiceModel.Channels.SymmetricSecurityBindingElement.BuildChannelListenerCore[TChannel](BindingContext context)
at System.ServiceModel.Channels.Binding.BuildChannelListener[TChannel](Uri listenUriBaseAddress, String listenUriRelativeAddress, ListenUriMode listenUriMode, BindingParameterCollection parameters)
at System.ServiceModel.Description.DispatcherBuilder.MaybeCreateListener(Boolean actuallyCreate, Type[] supportedChannels, Binding binding, BindingParameterCollection parameters, Uri listenUriBaseAddress, String listenUriRelativeAddress, ListenUriMode listenUriMode, ServiceThrottle throttle, IChannelListener& result, Boolean supportContextSession)
at System.ServiceModel.Description.DispatcherBuilder.BuildChannelListener(StuffPerListenUriInfo stuff, ServiceHostBase serviceHost, Uri listenUri, ListenUriMode listenUriMode, Boolean supportContextSession, IChannelListener& result)
at System.ServiceModel.Description.DispatcherBuilder.InitializeServiceHost(ServiceDescription description, ServiceHostBase serviceHost)
at System.ServiceModel.ServiceHostBase.InitializeRuntime()
at System.ServiceModel.ServiceHostBase.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
at System.ServiceModel.ServiceHostingEnvironment.HostingManager.ActivateService(ServiceActivationInfo serviceActivationInfo, EventTraceActivity eventTraceActivity)
at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath, EventTraceActivity eventTraceActivity)
--- End of inner exception stack trace ---
at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath, EventTraceActivity eventTraceActivity)
at System.ServiceModel.ServiceHostingEnvironment.EnsureServiceAvailableFast(String relativeVirtualPath, EventTraceActivity eventTraceActivity) Process Name: w3wp Process ID: 13036
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="System.ServiceModel 4.0.0.0" />
<EventID Qualifiers="49154">3</EventID>
<Level>2</Level>
<Task>5</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2026-04-18T07:32:56.544013100Z" />
<EventRecordID>63536</EventRecordID>
<Channel>Application</Channel>
<Computer>D365.itd.local</Computer>
<Security UserID="S-1-5-21-3947903853-4294393140-1253506887-500" />
</System>
<EventData>
<Data>System.ServiceModel.ServiceHostingEnvironment+HostingManager/27746459</Data>
<Data>System.ServiceModel.ServiceActivationException: The service '/test-01/XRMServices/2011/Organization.svc' cannot be activated due to an exception during compilation. The exception message is: The authentication schemes configured on the host ('IntegratedWindowsAuthentication') do not allow those configured on the binding 'CustomBinding' ('Anonymous'). Please ensure that the SecurityMode is set to Transport or TransportCredentialOnly. Additionally, this may be resolved by changing the authentication schemes for this application through the IIS management tool, through the ServiceHost.Authentication.AuthenticationSchemes property, in the application configuration file at the <serviceAuthenticationManager> element, by updating the ClientCredentialType property on the binding, or by adjusting the AuthenticationScheme property on the HttpTransportBindingElement.. ---> System.NotSupportedException: The authentication schemes configured on the host ('IntegratedWindowsAuthentication') do not allow those configured on the binding 'CustomBinding' ('Anonymous'). Please ensure that the SecurityMode is set to Transport or TransportCredentialOnly. Additionally, this may be resolved by changing the authentication schemes for this application through the IIS management tool, through the ServiceHost.Authentication.AuthenticationSchemes property, in the application configuration file at the <serviceAuthenticationManager> element, by updating the ClientCredentialType property on the binding, or by adjusting the AuthenticationScheme property on the HttpTransportBindingElement.
at System.ServiceModel.Channels.HttpTransportBindingElement.UpdateAuthenticationSchemes(BindingContext context)
at System.ServiceModel.Channels.HttpTransportBindingElement.BuildChannelListener[TChannel](BindingContext context)
at System.ServiceModel.Channels.DatagramChannelDemuxer`2..ctor(BindingContext context)
at System.ServiceModel.Channels.ChannelDemuxer.GetTypedDemuxer(Type channelType, BindingContext context)
at System.ServiceModel.Channels.ChannelDemuxer.BuildChannelListener[TChannel](BindingContext context, ChannelDemuxerFilter filter)
at System.ServiceModel.Channels.ChannelBuilder.BuildChannelListener[TChannel]()
at System.ServiceModel.Channels.SecurityChannelListener`1.InitializeListener(ChannelBuilder channelBuilder)
at System.ServiceModel.Channels.SymmetricSecurityBindingElement.BuildChannelListenerCore[TChannel](BindingContext context)
at System.ServiceModel.Channels.Binding.BuildChannelListener[TChannel](Uri listenUriBaseAddress, String listenUriRelativeAddress, ListenUriMode listenUriMode, BindingParameterCollection parameters)
at System.ServiceModel.Description.DispatcherBuilder.MaybeCreateListener(Boolean actuallyCreate, Type[] supportedChannels, Binding binding, BindingParameterCollection parameters, Uri listenUriBaseAddress, String listenUriRelativeAddress, ListenUriMode listenUriMode, ServiceThrottle throttle, IChannelListener& result, Boolean supportContextSession)
at System.ServiceModel.Description.DispatcherBuilder.BuildChannelListener(StuffPerListenUriInfo stuff, ServiceHostBase serviceHost, Uri listenUri, ListenUriMode listenUriMode, Boolean supportContextSession, IChannelListener& result)
at System.ServiceModel.Description.DispatcherBuilder.InitializeServiceHost(ServiceDescription description, ServiceHostBase serviceHost)
at System.ServiceModel.ServiceHostBase.InitializeRuntime()
at System.ServiceModel.ServiceHostBase.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
at System.ServiceModel.ServiceHostingEnvironment.HostingManager.ActivateService(ServiceActivationInfo serviceActivationInfo, EventTraceActivity eventTraceActivity)
at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath, EventTraceActivity eventTraceActivity)
--- End of inner exception stack trace ---
at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath, EventTraceActivity eventTraceActivity)
at System.ServiceModel.ServiceHostingEnvironment.EnsureServiceAvailableFast(String relativeVirtualPath, EventTraceActivity eventTraceActivity)</Data>
<Data>w3wp</Data>
<Data>13036</Data>
</EventData>
</Event>

Was this reply helpful? Yes No