Search This Blog

Thursday, January 7, 2016

Common error in ADFS configuration and MSCRM IFD

According to PowerObjects there is a common error in CRM internet-facing deployment:






So you need to go to ADFS console and change Federation Service Properties - Federation Service Identifier to

https://adfs.domain.com/adfs/services/trust


Then iisreset on ADFS, then on CRM server re.run Claims configuration. Do not change anything, just re.run wizard, then iisreset, re.run IDF wizard, iisreset once more and then test.

You should see a following event in the evenlog:


Log Name:      Application
Source:        MSCRMPlatform
Date:          07.01.2016 18:01:44
Event ID:      17209
Task Category: None
Level:         Information
Keywords:      Classic,Audit Success
User:          N/A
Computer:      server
Description:
The initialization of the CRM authentication pipline has succeeded for: GetServiceConfiguration - Initialization:
Host:
Request Url:
LogFederationProviders - Federation Provider:  - Name: https://adfs.domain.com/adfs/services/trust
AddAudienceUri - Audience Uri: https://crm.domain.com/
AddAudienceUri - Audience Uri: https://auth.domain.com/

No comments: