I currently have an AX 2012 R3 CU9 environment on Azure and have a site to site VPN setup between the customers AD and my Azure AD with a 2 way trust (External Trust Type -- Not Transitive). We are able to import users into AX now but I need to tell SharePoint to allow users from the new domain to have access to the Enterprise Portal. I am running SharePoint 2013 Foundation and I am trying to add the domain users from the new domain and I cannot. It looks like it recognizes it but when I click Full and then OK, it says it cannot find an exact match. Anyone have a way to add this group from the new domain to the SharePoint site permissions in EP? Does my 2 way trust need to be transitive? I am able to add individual users from the new domain but not a group. It is not an option to add all the individual users.
When I add a specific user from the new domain to the Site Permissions and then try to log into the Enterprise Portal, I get a "Message: An unhandled error has occurred. To view details about this error, enable debugging in the web.config file or view the Windows event logs." error and when I look in the Event Viewer on the EP server, I see a Microsoft Dynamics AX Enterprise Portal Event ID 1000:
An unhandled error has occurred. To view details about this error, enable debugging in the web.config file or view the Windows event logs.
Access is denied.
mscorlib
Server stack trace:
at System.ServiceModel.Channels.ServiceChannel.ThrowIfFaultUnderstood(Message reply, MessageFault fault, String action, MessageVersion version, FaultConverter faultConverter)
at System.ServiceModel.Channels.ServiceChannel.HandleReply(ProxyOperationRuntime operation, ProxyRpc& rpc)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at Microsoft.IdentityModel.WindowsTokenService.S4UClient.IS4UService_dup.UpnLogon(String upn, Int32 pid)
at Microsoft.IdentityModel.WindowsTokenService.S4UClient.CallService(Func`2 contractOperation)
at Microsoft.SharePoint.SPSecurityContext.GetWindowsIdentity()
