CRM 2013 onpremise: keeps asking for credentials

(0) Share

Report

Posted on by Community Member

Hello all,

Any thoughts about the cause of these multiple login requests?
It looks like this is happening when CRM tries to access webresources... apparently this is only happening in entities where i have custom code...

Same thing in edge, IE and chrome.

Thank you.

*This post is locked for comments

I have the same question (0)

All responses (7)

Answers (0)

Suggested answer

Rajkumar Rajaraman on at

Like (0)

Report

you find similar issues and solution suggested here

community.dynamics.com/.../53733

community.dynamics.com/.../135073

Regards,

R.Rajkumar

"Please mark my answer as verified if you found it helpful"

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Thank you. Have tried all of those suggested solutions but still the same issue.

The site id added to truested site, i have NTLM and negotiate as providers, kernel mode authentication is active... even tried in "apppool" change "load user profile" to true... also tried, to clean all wntries in windows credentials vault, clean history, cache...

Was this reply helpful? Yes No
Suggested answer

Community Member on at

Like (0)

Report

A typical cause for that are cross site scripting issues:

When web service calls from Javascript are made, usually the address configured in the CRM Deployment Manager is used (for the whole site).

This address can be with or without full qualified domain, e. g. "myhost.example.com" or "myhost".

If CRM is opened against the other variant of the name, the web service call does not match the host from where it is calling, and because the local browser can not know whether it is the same remote party, a login request can appear. The same is true when the IP is used to open CRM instead of a name.

Solution: Call CRM via the host name as configured in the CRM properties in the CRM Deployment Manager, use this in CfO as well and instruct all users to use (only) this address.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Hello GeroT - thank you.

I´m using:

var serverUrl = "https://" + window.location.host + "/" + Xrm.Page.context.getOrgUniqueName(); so, if the user uses the same address as the one configured in the crm deployment manager (as instructed), window.location.host should inherit the same address, so it shouldn't be cross site scripting right?

This is really weird because no change has been made for a few months and only now this issue is occurring...

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Ricardo, Did you see similar issues in Test environments? Curious to know the root cause and fix for the issue.

best of luck,

Harihar

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Hello harihar,

Unfortunately no. The test environment is now off air as everything was tested and running well for a few months, but we never had this issue before.

Was this reply helpful? Yes No
Suggested answer

MilindP 1,019 on at

Like (0)

Report

Hi,

you can capture the fiddler logs when its not asking for credential and when its asking for credentials and compare those to figure out where it is failing to negotiate the authentication.

as the kernel mode is ON you may check your SPNs as well which created for service account and for the environment.

Was this reply helpful? Yes No