For a crm 365 8.2 on-prem ifd deployment, we have multiple organizations and each organization has their own o365 tenancy and license. Is it possible for me to still use server side sync for these organizations if I'm not provided an o365 account with global admin membership?
*This post is locked for comments
Hi Beth,
Any thoughts on my question above?
"In reading your blog post here I'm interested in offering my crm ifd clients some sort of sso capability.
Here is what I'm working with now: (fictional domains)
Clients login to my crm ifd deployment at partner.crm.com. The partners o365 tenancy is @partner.com and their local internal domain is partner.internal.domain
My crm's adfs server public domain is adfs.crm.com but its internal domain is adfs.internalcrm.domain
Is it possible for me to offer some sort of trusted federation between their o365 tenancy and my crm ifd deployment if they do not have an adfs server at their internal domain but they do have an azure adfs instance?"
[quote user="bac26"]
You should be able to approve emails ad Dynamics Admin. It is just setting up the SSS piece that you need Global Admin for.
[/quote]
It won't let me. I get a CrmSecurity exception stating "User 22d2a852-065a-e811-a97a-000d3a1a7089 should be a global administrator to approve mailbox in organization 5ceb1408-ec06-4d36-84e3-699525a734aa."
[quote user="bac26"]
Unfortunately you need to have Global admin at this time.
[/quote]
Which is a terribly stupid. I'm an Exchange Admin, Dynamics Admin, Sharepoint, etc. I'm just not a Global Admin. I'm unable to approve new user's email addresses. Instead I have to go and track down one of 2 global admins in a company of nearly 500 employees and have them manually approve an inbox.
Thank you Beth.
In reading your blog post here I'm interested in offering my crm ifd clients some sort of sso capability.
Here is what I'm working with now: (fictional domains)
Clients login to my crm ifd deployment at partner.crm.com. The partners o365 tenancy is @partner.com and their local internal domain is partner.internal.domain
My crm's adfs server public domain is adfs.crm.com but its internal domain is adfs.internalcrm.domain
Is it possible for me to offer some sort of trusted federation between their o365 tenancy and my crm ifd deployment if they do not have an adfs server at their internal domain but they do have an azure adfs instance?
#1
André Arnaud de Cal...
292,516
Super User 2025 Season 1
#2
Martin Dráb
231,387
Most Valuable Professional
#3
nmaenpaa
101,156
Share
Report
All responses (
Answers (
