web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Microsoft Dynamics CRM (Archived) / Isolated Authenticatio...
Microsoft Dynamics CRM (Archived)

Isolated Authentication Issues with ADFS and IFD

(0) ShareShare
ReportReport
Posted on by Shem 120

I have CRM 2011 configured with ADFS and IFD. For the most part this is all working fine however I now have a number of isolated problems with authentication. I really don't know where to look so I am very much looking for some suggestions on where to start the troubleshooting process.

Here are the problem scenarios:

  1. Web based authentication fails on internal url for one user on a one machine.
    1. Redirects to adfs and the user is prompted for username and password.
      1. After 3 attempts, Error returned: 401 - Unauthorized: Access is denied due to invalid credentials.
      2. If another users credentials are entered then authentication is fine.
    2. This same user has no problems on other machines.
    3. The same user has no problems using the external URL on the same machine.
    4. Other users have no problems on this same machine.
    5. As you can see this is isolated to a single user on one machine. It happens to be their personal laptop, so not ideal.
  2. A different user now with CRM Outlook client configured with the external URL. (Most users have configured with internal URL and works fine)
    1. Dialog prompts for Username and Password when accessing externally but authentication always fails.
    2. When accessing internally there is no prompt for credentials and the outlook client authenticates fine.
  3. We have an add on solution called PowerMailChimp.
    1. While this has worked in the past it no longer works.
    2. When sending a PowerMailChimp Blast campaign the following error occurs.
      1. The HTTP request is unauthorized with client authentication scheme ‘Anonymous’. The authentication header received from the server was ‘NTLM’.
    3. We are currently getting support from Power Objects on this problem but I thought I would mention it incase it is in some way related.

I have looked through the application logs in Event Viewer and don't see any obviously related errors. I understand that the above errors are potentially unrelated and I haven;t provided a great deal of detail in relation to errors however I was hoping somebody could aid me with some troubleshooting steps form here.

Thanks for any forthcoming advice.

Cheers Shem

*This post is locked for comments

I have the same question (0)
  • Suggested answer
    Brian Storie Profile Picture
    Brian Storie on at

    Hello Shem,

    Your first issue sounds like its do to a corrupt Windows Profile.  As no other users have the problem on his machine, and he doesn't have the problem on other machines. Additional you could try doing a restore to defaults of the I.E. Settings to see if this goes away.  If it doesn't then you will need to replace the users Profile.

    Your second issue may be caused by either not having the CRM and ADFS site listed in Trusted Sites, or your users aren't supplying the correct format of " Domain\username " in the login box.

    In regards to yoru third issue,  can you verify that you have Anonnymous access enabled for the CRM Website.  As it sounds like your plugin is hitting the site, then being asked to authenticate and isn't supplying credentials.

    Lastly all of the above items could be caused by running the CRM AppPool account as a CRM User.   If you are running the CRM Application Pool as an AD user, please ensure that it is not a CRM User account, as this can break both webservices, Outlook Configurations, and other items in CRM.

    I hope this helps.

    Best Regards,

    Brian Storie

    CRM Support Engineer

  • Shem Profile Picture
    Shem 120 on at

    Thank you for your suggestions Brian.

    Unfortunately I have still not resolved the problems after checking the above settings. PowerMailChimp have advised me that I most likley have ADFS configuration issues however not provided any guidance or ideas on where to look. Moving forward I am about to just start from scratch and configure ADFS and CRM IFD from the beginning and see if I have better results. I will update if this fixes my issues otherwise, everyone please feel free to add further comments/suggestions.  

  • Cecilie Svensgaard Profile Picture
    Cecilie Svensgaard on at

    Hi Shem,

    We would be happy to look at your ADFS configuration and figure out what is going wrong. I apologize if I didn't communicate that well enough in our emails. Please let me know if you are interested - cecilie.svensgaard@powerobjects.com.

    We would like to get PowerMailChimp working for you.

  • Shem Profile Picture
    Shem 120 on at

    Thank you Cecilie,

    I would be happy to accept your help. I guess I just did not ask as our ADFS setup is technically not a PowerMailChimp issue, so thank you for the offer. I will contact you directly.

  • Suggested answer
    SteveDrakey Profile Picture
    SteveDrakey 30 on at

    We have seen this issue and its caused by Roll up 7 . Have a look at this blog

    2e2ba.blogspot.com/.../crm-2011-adfs-ifd-401-globalashx.html

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Congratulations to the November Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

#1
SA-08121319-0 Profile Picture

SA-08121319-0 4

#1
Calum MacFarlane Profile Picture

Calum MacFarlane 4

#3
Alex Fun Wei Jie Profile Picture

Alex Fun Wei Jie 2

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans