I ran into a problem with our production CRM system, specifically with the Dynamics 365 app for Outlook. Our setup was working fine until recently.
Now when someone opens the Dynamics 365 panel in Outlook or OWA (any browser), the panel starts loading and after about a minute seems to time out and display an error ("cannot connect").
After checking all network related options I started debuggin the Javascript to try to figure out at which point exactly the problem occurs. I found the following:
- at some early point in the login process of the app, the embedded iframe sends an XHttpRequest to the following URL: https://<crmserver>/XRMServices/2011/Organization.svc/web?SdkClientVersion=7.0.0000
- the server replies with an http status 401 (access denied). This seems to be intentional
- Some Javascript code now processes the reply, specifically the http header "WWW-Authenticate". From the code I can derive that the heaeder's value is expected to look something like this: "bearer authorization_uri=<URL>, resource_id=<some ID>"
- But the server sends this header with an empty value
- This leads to an error, which seems to not be handled... leading to the timeout.
Does anyone have an idea what the problem might be?
Like I said, everything worked fine until about 2 weeks ago. At the time we updated the certificates of the CRM server and the ADFS server and had all available Windows updates installed. No changes to the CRM beyond that. We're using CRM on premise, current version: 8.2.10.24. I'm aware that there are newer patches and we plan to install them.
