CRM 2011 IFD on premises Outlook 2010 Authentication failed errors
-
1. august 2012 22:37
Hi,
I am having issues connecting to CRM 2011 from outlook client. I am able to login to the IFD URL using the browser without any errors. When I try to connect to using CRM configuration wizard I get the error :
---------------------------
Microsoft Dynamics CRM
---------------------------
Cannot connect to Microsoft Dynamics CRM server because we cannot authenticate your credentials. Check your connection or contact your administrator for more help.
---------------------------
OK
---------------------------
I enabled tracing logs and found the below errors :
04:05:12| Info| === Microsoft Dynamics CRM for Outlook Configuration Wizard logging started: 8/2/2012 4:05:12 AM ===
04:05:12|Verbose| Method entry: Microsoft.Crm.Application.Outlook.Config.ClientConfig.Initialize
04:05:12| Info| Client Configuration Wizard Version : 5.0.9690.2243
04:05:12| Info| Client Configuration Wizard LanguageID : 1033
04:05:12|Verbose| Method entry: Microsoft.Crm.Application.Outlook.Config.Validator.IsOutlookInitialized
04:05:12| Info| Query all rows in profile table
04:05:12| Info| Outlook is initialized
04:05:12|Verbose| Method exit: Microsoft.Crm.Application.Outlook.Config.Validator.IsOutlookInitialized
04:05:12| Info| Client Configuration Wizard Running Mode : Normal
04:05:13| Info| Configuration file Type : OnPremise.
04:05:13|Verbose| Method entry: Microsoft.Crm.Application.Outlook.Config.MainForm.MainForm
04:05:13|Verbose| Method entry: Microsoft.Crm.Application.Outlook.Config.ConfigInfo.ConfigInfo
04:05:13|Verbose| Method entry: Microsoft.Crm.Application.Outlook.Config.OutlookCRMDatastoreInstaller.GetAvailableServiceIds
04:05:13| Info| Logon mapi store
04:05:13| Info| Logon admin service
04:05:13|Verbose| Method entry: Microsoft.Crm.Application.Outlook.Config.OutlookCRMDatastoreInstaller.GetServiceIds
04:05:13| Info| Query all rows in msg service table
04:05:13| Info| Adding service id : {b2d4b98a-8066-49d4-826d-4971a0526589}
04:05:13| Info| Adding service id : {9186f85d-30d1-4a30-8385-bc34a3a0b514}
04:05:13| Info| Adding service id : {e51eb1a7-cd2b-4fb5-94ef-5bb1eec2bae0}
04:05:13| Info| Adding service id : {379173a4-cfda-40ed-88a9-b57f66e8928b}
04:05:13| Info| Adding service id : {e3239137-279f-4049-9292-6a8bbeda9e22}
04:05:13| Info| Adding service id : {ac67ce77-e894-4f2c-aa6b-413886245431}
04:05:13| Info| Adding service id : {2c6724a1-478f-4cb9-ae1f-7146540322a1}
04:05:13|Verbose| Method exit: Microsoft.Crm.Application.Outlook.Config.OutlookCRMDatastoreInstaller.GetServiceIds
04:05:13|Verbose| Method entry: Microsoft.Crm.Application.Outlook.Config.ConfigInfo.RemoveOrphanDatastoreIfNeeded
04:05:13| Info| Logon mapi store
04:05:13| Info| Logon admin service
04:05:13| Info| Query crm msg services in msg service table.
04:05:13|Verbose| Method exit: Microsoft.Crm.Application.Outlook.Config.ConfigInfo.RemoveOrphanDatastoreIfNeeded
04:05:13|Verbose| Method exit: Microsoft.Crm.Application.Outlook.Config.ConfigInfo.ConfigInfo
04:05:13|Verbose| Method exit: Microsoft.Crm.Application.Outlook.Config.MainForm.MainForm
04:05:13|Verbose| Method entry: Microsoft.Crm.Application.Outlook.Config.MainForm.MainForm_Shown
04:05:13|Verbose| Method entry: Microsoft.Crm.Application.Outlook.Config.MainForm.AddServer
04:05:13|Verbose| Method entry: Microsoft.Crm.Application.Outlook.Config.ServerForm.ServerForm
04:05:13|Verbose| Method exit: Microsoft.Crm.Application.Outlook.Config.ServerForm.ServerForm
04:05:13|Verbose| Method entry: Microsoft.Crm.Application.Outlook.Config.ServerForm.SetUIData
04:05:13|Verbose| Method exit: Microsoft.Crm.Application.Outlook.Config.ServerForm.LoadAvailableUrls
04:05:13|Verbose| Method exit: Microsoft.Crm.Application.Outlook.Config.ServerForm.LoadAvailableUrls
04:05:13|Verbose| Method exit: Microsoft.Crm.Application.Outlook.Config.ServerForm.SetUIData
04:05:26|Verbose| Method entry: Microsoft.Crm.Application.Outlook.Config.ServerForm._okButton_Click
04:05:26|Verbose| Method exit: Microsoft.Crm.Application.Outlook.Config.ServerForm._okButton_Click
04:05:39| Error| Error connecting to URL: https://IFD URL:444/XRMServices/2011/Discovery.svc Exception: Microsoft.Crm.CrmException: Authentication failed
at Microsoft.Crm.Outlook.ClientAuth.ClaimsBasedAuthProvider`1.AuthenticateClaims()
at Microsoft.Crm.Outlook.ClientAuth.ClaimsBasedAuthProvider`1.SignIn()
at Microsoft.Crm.Outlook.ClientAuth.ClientAuthProvidersFactory`1.SignIn(Uri endPoint, Credential credentials, AuthUIMode uiMode, IClientOrganizationContext context, Form parentWindow, Boolean retryOnError)
at Microsoft.Crm.Application.Outlook.Config.DeploymentsInfo.DeploymentInfo.LoadOrganizations(AuthUIMode uiMode, Form parentWindow, Credential credentials)
at Microsoft.Crm.Application.Outlook.Config.DeploymentsInfo.InternalLoadOrganizations(OrganizationDetailCollection orgs, AuthUIMode uiMode, Form parentWindow)
Please help
Alle besvarelser
-
2. august 2012 18:39Can anyone please help?
-
2. august 2012 18:51Tried these steps?
Carsten Groth http://carstengroth.wordpress.com Microsoft Dynamics Certified Technology Specialist CRM Online 30 Tage kostenfrei testen – http://crm.dynamics.com/de-de/trial-overview
-
2. august 2012 21:13
Hi,
We had the same problem connecting to an Online instance. The following tool helped us get more information on what was happening - MOSDAL (Microsoft Online Services Diagnostics and Logging) Support Toolkit : http://www.microsoft.com/en-us/download/details.aspx?id=626
Check for problems with proxies, or routing problems to your server.
Best regards,
Paulo
- Foreslået som svar af Paulo Alexandre Sebastião 2. august 2012 21:14
-
3. august 2012 21:06Thanks Tried all the the steps at http://rc.crm.dynamics.com/rc/2011/en-us/online/5.0/outlook-troubleshooting.aspx but it does not help...:( any other ideas looking at the logs?
-
3. august 2012 21:37I tried the tool MOSDAL (Microsoft Online Services Diagnostics and Logging) but it does not have option for CRM 2011 service. I am using on premise CRM 2011.. Please help...
-
8. august 2012 13:56Can anyone please help and suggest?
-
10. december 2012 17:14Hi, I get exactly the same errors and tried the steps mentioned above. But the error still exists. Could please someone give us a hint what to check? Thanks!
-
31. januar 2013 17:03
The very same issue in my case. Both client and CRM server are in the same domain, the same LAN, the same subnet. Before setting up claims authentication and IFD I was able to connect CRM Outlook client to the server by using https://crmorganization.domain.com. After setting claims and IFD I still can access everything with browser (https://sts.domain.com, https://auth.domain.com, https://dev.domain.com, https://crmorganization.domain.com), but CRM client for Outlook can't connect anymore. I'm constantly getting "Cannot connect to Microsoft Dynamics CRM server because we cannot authenticate your credentials. Check your connection or contact your administrator for more help." and login prompt again and again, although I can sign with the same credentials, from the same machine by using browser. Client log is the same as provided in the original post above.
I'm desperate! Help pls! :)
Fat Dragon
-
3. februar 2013 19:27
I've found the answer in my case. ADFS version can be the issue. Dynamics CRM IFD can be configured with ADFS 2.0, but CAN NOT be configured with ADFS 2.1 (embeded in WinSrv2012). If you configure IFD with ADFS 2.1 - you'll get these symptoms. You'll be able to access CRM through browser, but Outlook client won't connect, with exact same error.
Officially, support for ADFS2.1 is in testing phase at moment of writing this.
Hope it was helpful
Fat Dragon
Fat Dragon
- Foreslået som svar af Fat Dragon 3. februar 2013 19:27
-
18. februar 2013 13:05Wow, thank you very much for sharing your solution / explanation. That was exactly my problem, too. After switching to ADFS 2.0 everything works just fine.
-
18. februar 2013 17:12If it was helpful for you, it would be great to click "Propose As Answer" and "Vote As Helpful", so that I can get some point... :)
Fat Dragon
-
6. marts 2013 10:07
I would love to, but unfortunately that's not possible. You already proposed your post as answer. There is not button I could press. Only the other posts have this button.
But I clicked "Vote As Helpful". That button worked well :-)
- Redigeret af andreas-ger 6. marts 2013 10:08
