Single Sign on / Windows authentication required

(0) Share

Report

Posted on by Vishal Jevtani

278

Hi All,

We have deployed Dynamics 365 Finance and Operations July 2017 update. Customer has demanded for single sign on to the D365 environment. To describe it in their words, they do not want to enter the username and password for the user who is already a domain user and logged into the windows. I went through some blogs/ Documentation from Microsoft. Most of them are for Dynamics 365 / Dynamics 365 CRM, and these do not seem to apply on Finance and Operations.

I need to know how can we achieve this, I believe there is some way available. I do not know much about AD FS, I tried enabling Windows Integrated Authentication, and I was able to see the windows login dialog (screenshot below), but it is asking to log in to AD FS machine.

All responses (2)

Answers (0)

Suggested answer

Pedro Romero Narvaez 37 on at

Like (1)

Report
RE: Single Sign on / Windows authentication required

I've got it for Dynamics 365 Finance and Operations (on-premises) Ver.10.0.27 (10.0.1227.97)

In ADFS configure windows authentication

also enter this command:

Set-AdfsProperties -WIASupportedUserAgents @("MSIE 6.0", "MSIE 7.0; Windows NT", "MSIE 8.0", "MSIE 9.0", "MSIE 10.0; Windows NT 6", "Windows NT 6.3; Trident/7.0", " Windows NT 6.3; Win64; x64; Trident/7.0", "Windows NT 6.3; WOW64; Trident/7.0", "Windows NT 6.2; Trident/7.0", "Windows NT 6.2; Win64; x64; Trident/7.0", " Windows NT 6.2; WOW64; Trident/7.0", "Windows NT 6.1; Trident/7.0", "Windows NT 6.1; Win64; x64; Trident/7.0", "Windows NT 6.1; WOW64; Trident/7.0","Windows NT 10.0; WOW64; Trident/7.0", "MSIPC", "Windows Rights Management Client", "=~Windows\s*NT.*Edg.*","chrome")

in addition to these:

Set-AdfsProperties -EnablePersistentSso $true Set-AdfsProperties -EnableKmsi $true

In addition I had to create a GPO so that it adds the adfs URL to the "intranet" zone with value 1, as well as enable for this zone "Automatic login with the current username and password"

And dynamics 365 automatically logs you in with the username and password (domain) that you logged into windows.

Very useful for running the Production Floor Execution.
Jie G on at

Like (1)

Report

RE: Single Sign on / Windows authentication required

How and where did you configure windows integrated authentication? The login dialog does not mean it's asking to logon the server, it can also be asking to connect to sites hosting on the server.

Basically, you can add your ADFS login page URL to the intranet zone of the IE on the client PC. Then if you logon D365, you will be redirected to ADFS and user will logon ADFS login site automatically, then the token will be posted back to D365 to finish the SSO process.

PS: By default, IE will try to logon the URL listed in its intranet zone using current user's credential so user will not need enter the username and password.