CRM 2016 On-Premise - IFD Setup But No External Access!!

(0) Share

Report

Posted on by Joel Abbott - xRM C...

135

Hi!,

I have a single Azure server that has CRM 2016 installed on it. I use it as a development server but i want to be able to access it externally via the IFD.

I have followed all the steps in this great post which outlines exactly what i am trying to achieve...

http://dynamicscrmcoe.com/set-up-dynamics-crm-2016-ifd-deployment-azure-vm/

I also went through the steps on the TechNet pages that are mentioned. I went through it all at least twice and yet i still seem to have an issue trying to access any of my organisations externally.

As an example, i have an organisation called xrmconsultantcrm. My domain is xrmconsultant.com.

When i go to the following link on the server itself it works perfectly https://xrmconsultantcrm.xrmconsultant.com:444/main.aspx#958391569 It redirects to ADFS, asks me for my login information and then takes me to CRM...Great!

However, when i try and access this externally, i get a blank page with

This site can’t be reached

xrmconsultantcrm.xrmconsultant.com’s server DNS address could not be found.

I have the DNS record setup with my domain supplier (FastHosts). This points to the static public IP of my server which azure redirects to the local IP of 10.0.0.4. I have also setup a DNS A record on the server in DNS Manager for "xrmconsultantcrm" that also points to the internal address of 10.0.0.4.

I have gone through all the steps again and again but cant find where the issue is! FYI, all of the above testing is being done with the firewall off so no issue there

Any suggestions?

Thanks in advance

*This post is locked for comments

I have the same question (0)

All responses (6)

Answers (1)

Suggested answer

Nadeeja Bomiriya 6,804 on at

Like (0)

Report

Hi Joel,

You need to open the port 444 in Azure using one of the two methods described in below articles.

docs.microsoft.com/.../virtual-machines-windows-classic-setup-endpoints

docs.microsoft.com/.../virtual-machines-windows-nsg-quickstart-portal

Was this reply helpful? Yes No
Suggested answer

Drew Poggemann 4 on at

Like (0)

Report

Hi Joel,

When I hit this URL externally it is taking me to:

xrmconsultant.com/.../ls;wtrealm=https%3a%2f%2fxrmconsultantcrm.xrmconsultant.com%3a444%2f&wctx=rm%3d1%26id%3da007c591-5c91-4257-ae72-3536f1271815%26ru%3dhttps%253a%252f%252fxrmconsultantcrm.xrmconsultant.com%253a444%252fdefault.aspx&wct=2017-01-11T00%3a46%3a48Z&wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword

This is basically taking you to your 88.208.252.9 host and not your Azure environment which is why it is not working (I think) since there is no URL in front of your xrmconsultant.com. I did a ping on this URL and it returned the 88.208.252.9. I would expect this should route to something like:

sts.xrmconsultant.com/adfs... where you would have your public IP address for the auth.xrmconsultant.com pointing to azure IP for your ADFS environment right?

Something like the following:

If I am totally off base, sorry. I have not set this up before but reviewing what I see it seems to be the problem.

Hope this helps.

Thanks,

Was this reply helpful? Yes No
Joel Abbott - xRM C... 135 on at

Like (0)

Report

Thanks both, i already have my ports open on Azure...

Regarding the DNS, i did have an errant DNS record which i have now removed. But alas, i still cant get through,

any suggestions?

TA

J

Was this reply helpful? Yes No
Verified answer

Drew Poggemann 4 on at

Like (1)

Report

Hi Joel,

1. When I try to go to https://xrmconsultantcrm.xrmconsultant.com now it goes to your IIS server page which is different than before.

2. When I try to go to https://xrmconsultantcrm.xrmconsultant.com:444 it takes a long time and then times out with the following:

https://xrmconsultant.com/adfs/ls/?wa=wsignin1.0&wtrealm=https%3a%2f%2fxrmconsultantcrm.xrmconsultant.com%3a444%2f&wctx=rm%3d1%26id%3d4a113f14-b76d-4a53-955e-99991650b0c3%26ru%3dhttps%253a%252f%252fxrmconsultantcrm.xrmconsultant.com%253a444%252fdefault.aspx&wct=2017-01-11T11%3a58%3a42Z&wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword

Now, If I take this URL and change to put in sts in the front of the xrmconsultant.com it takes me to your sign in page! :)

https://sts.xrmconsultant.com/adfs/ls/?wa=wsignin1.0&wtrealm=https%3a%2f%2fxrmconsultantcrm.xrmconsultant.com%3a444%2f&wctx=rm%3d1%26id%3d4a113f14-b76d-4a53-955e-99991650b0c3%26ru%3dhttps%253a%252f%252fxrmconsultantcrm.xrmconsultant.com%253a444%252fdefault.aspx&wct=2017-01-11T11%3a58%3a42Z&wauth=urn%3aoasis%3anames%3atc%3aSAML%3a1.0%3aam%3apassword

You are very close. I think it has to do with the mapping to your ADFS URL somehow not adding the sts in the front. See if you can find that...

Hope this helps.

Thanks,

Was this reply helpful? Yes No
Joel Abbott - xRM C... 135 on at

Like (0)

Report

IT WORKS!!!!

This has taken me days!! Drew, you are a total legend!

What it was in the end was that the federation service name didn't have the "sts." at the beginning.

Thanks again

J

Was this reply helpful? Yes No
Drew Poggemann 4 on at

Like (0)

Report

Hi Joel, thanks much! :) Can you please mark as verified?

Was this reply helpful? Yes No