Custom Authentication on the Dynamics CRM portal.

(0) Share

Report

Posted on by Community Member

Hi all,

Me and my team are working on a PoC for one of our customers. One of their requirements is to implement SSO which basically only returns the governmentid which we can use.

My question is: Is there a way to use this governmentid for logging into the portal by searching the portal users?

Thank you in advance!!!

Kind regards,

Dennis

*This post is locked for comments

I have the same question (0)

All responses (5)

Answers (1)

Suggested answer

Jeevarajan Kumar 781 Most Valuable Professional on at

Like (1)

Report

Hi Dwijands,

Are you planning to do a new implementation of SSO for Dynamics Portals? Or the customer already has an SSO designed for them and you need to reuse their data to provide access to the Dynamics Portal you are developing?

In case of the first one, you can use the Azure AD-B2C - it's available from latest July release. Get more details about it, here.

Or using AAD, https://community.dynamics.com/crm/b/debajitcrm/archive/2017/06/12/dynamics-365-portal-authentication-with-external-identities-part-i-authentication-with-azure-active-directory

Hope it helps.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Hi Kumar,

Thank you for your answer. Unfortunately it is an existing SSO which only returns a governmentid. Do you see a way to use this governmentid to login to the portal based on the governmentid in the user entity?

Your help is very much appreciated :)

Kind regards,

Dennis

Was this reply helpful? Yes No
Suggested answer

JohnAnonymous 5,241 on at

Like (1)

Report

I don't you can do this in a secure manner as you cannot write any server side code. Are you sure that they do not support something like OpenIDConnect?

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Hi Martijn,

We are using the latest on-premise version of the Portal so we are able to change server side code.

To be more specific, we are looking at implementating DigiD. DigiD does support SAML but I don't believe we can use it to authenticate based on the governmentid.

I have read about ASP.NET Identity Authentication (community.adxstudio.com/.../asp.net-identity-authentication) but don't see a way to find a user based on other fields. I only see the possibility to login via f.e. username and password and then add external logins (Facebook, Twitter, etc) to that user.

Do you think it is possible to validate a user based on a search within the user table, like the FindByEmail within the OWIN framework?

Cheers!

Dennis

Was this reply helpful? Yes No
Verified answer

JohnAnonymous 5,241 on at

Like (0)

Report

If you are sure that the token you receive from DigidId is secure and can be trusted, you could store the 'governmentid' in the contact entity. And built your own logic to retreive the contact based on that id.

You can implement your own version of ASP.net identity. E.g. I have used an open source version where the identity is not stored in SQL but in Table Storage. Maybe this post helps? stackoverflow.com/.../asp-net-identity-custom-usermanager-userstore

Was this reply helpful? Yes No