ADFS Configuration We need to ensure the Outlook App ID is registered with ADFS to allow OAuth authentication to succeed.
First we need to retrieve the Outlook APP ID from CRM, you can access this information on theSettings Menu>Dynamics 365 App for Outlook
you will see the following screen:
Run the following command on the ADFS server:
Add-AdfsClient -ClientId YOUR_ID -Name "Dynamics CRM Outlook Client" -RedirectUri my_CRM_domain/.../code_auth.aspx
ADFS 4.x (windows server 2016) If you are using ADFS with Windows server 2016, in addition to the above steps, you also need to grant permissions to the Outlook App, please run the following command in powershell:
Please note the domain used here, is the IFD authentication CRM URL, usually named authcrm.domain Grant-AdfsApplicationPermission -ClientRoleIdentifier YOUR_APP_ID -ServerRoleIdentifier "authcrm.domain.com” -ScopeNames openid
ADFS Authentication Providers Forms based authentication is required to be enabled on the intranet zone. Open the ADFS management wizard.
Click on custom level and scroll down to user authentication section, select anonymous logon and save changes.
Was this reply helpful?YesNo
Under review
Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.