Server Side Synchronization with multiple organizations with multiple o365 domains

(0) Share

Report

Posted on by Community Member

For a crm 365 8.2 on-prem ifd deployment, we have multiple organizations and each organization has their own o365 tenancy and license. Is it possible for me to still use server side sync for these organizations if I'm not provided an o365 account with global admin membership?

*This post is locked for comments

I have the same question (0)

All responses (6)

Answers (0)

Suggested answer

bac26 2,268 on at

Like (0)

Report

Unfortunately you need to have Global admin at this time.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Thank you Beth.

In reading your blog post here I'm interested in offering my crm ifd clients some sort of sso capability.

Here is what I'm working with now: (fictional domains)

Clients login to my crm ifd deployment at partner.crm.com. The partners o365 tenancy is @partner.com and their local internal domain is partner.internal.domain

My crm's adfs server public domain is adfs.crm.com but its internal domain is adfs.internalcrm.domain

Is it possible for me to offer some sort of trusted federation between their o365 tenancy and my crm ifd deployment if they do not have an adfs server at their internal domain but they do have an azure adfs instance?

Was this reply helpful? Yes No
JFulfordMS 189 on at

Like (0)

Report

[quote user="bac26"]

Unfortunately you need to have Global admin at this time.

[/quote]

Which is a terribly stupid. I'm an Exchange Admin, Dynamics Admin, Sharepoint, etc. I'm just not a Global Admin. I'm unable to approve new user's email addresses. Instead I have to go and track down one of 2 global admins in a company of nearly 500 employees and have them manually approve an inbox.

Was this reply helpful? Yes No
bac26 2,268 on at

Like (0)

Report

You should be able to approve emails ad Dynamics Admin. It is just setting up the SSS piece that you need Global Admin for.

Was this reply helpful? Yes No
JFulfordMS 189 on at

Like (0)

Report

[quote user="bac26"]

You should be able to approve emails ad Dynamics Admin. It is just setting up the SSS piece that you need Global Admin for.

[/quote]

It won't let me. I get a CrmSecurity exception stating "User 22d2a852-065a-e811-a97a-000d3a1a7089 should be a global administrator to approve mailbox in organization 5ceb1408-ec06-4d36-84e3-699525a734aa."

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Hi Beth,

Any thoughts on my question above?

"In reading your blog post here I'm interested in offering my crm ifd clients some sort of sso capability.

Here is what I'm working with now: (fictional domains)

Clients login to my crm ifd deployment at partner.crm.com. The partners o365 tenancy is @partner.com and their local internal domain is partner.internal.domain

My crm's adfs server public domain is adfs.crm.com but its internal domain is adfs.internalcrm.domain

Is it possible for me to offer some sort of trusted federation between their o365 tenancy and my crm ifd deployment if they do not have an adfs server at their internal domain but they do have an azure adfs instance?"

Was this reply helpful? Yes No