locked
IFD Claims Issue RRS feed

  • Question

  • Hello,

    We are in the process of setting up IFD and seem to have hit problems after setting up claims based authentication.  When trying to access https://internalcrm.ourdomain.com/ wwe get the windows security box pop up asking for credentials.  If I enter correct credentials twice then we get access to the CRM.  Is there a reason why it's not reading Windows login details?

    Thanks.

    Monday, December 17, 2012 11:40 AM

Answers

  • We need to first isolate few things here :-

    1) Are you login in from  CRM server itself ? - Yes - if you are getting a single prompt and after you enter the credentials you can access CRM this means you do not have the website for which it prompts in local intranet sites. Please add the website to local intranet sites. Please make sure setting of the browser is set to "automatic login with current user and password"

    2) If you are login in from a client machine present in the same domain as CRM server? Yes - Please follow above suggestion

    If you get 3 prompts and even after you enter credentials and get 401 error this means SPNs are not set properly on the account running your crm app pool.

    3) If the SPNs are set properly but still you get 401 then Set useAppPoolCredentials attribute to TRUE in IIS on CRM server if you have a custom crm app pool account and SPNs are set on app pool.

    4)If the multiple prompts comes only from server but from all other machines it works all fine ? Yes - Disable Loop back check by adding BackConnectionHostNames reg key on CRM server or DisableLoopbackCheck reg key. follow below article to set these keys.

     

    http://support.microsoft.com/kb/896861?wa=wsignin1.0

     If you get a prompt and after you enter the credentials this means


    Arpita

    • Marked as answer by RoarCRM Monday, March 11, 2013 3:02 PM
    Wednesday, December 19, 2012 3:48 AM

All replies

  • Monday, December 17, 2012 2:19 PM
    Moderator
  • We need to first isolate few things here :-

    1) Are you login in from  CRM server itself ? - Yes - if you are getting a single prompt and after you enter the credentials you can access CRM this means you do not have the website for which it prompts in local intranet sites. Please add the website to local intranet sites. Please make sure setting of the browser is set to "automatic login with current user and password"

    2) If you are login in from a client machine present in the same domain as CRM server? Yes - Please follow above suggestion

    If you get 3 prompts and even after you enter credentials and get 401 error this means SPNs are not set properly on the account running your crm app pool.

    3) If the SPNs are set properly but still you get 401 then Set useAppPoolCredentials attribute to TRUE in IIS on CRM server if you have a custom crm app pool account and SPNs are set on app pool.

    4)If the multiple prompts comes only from server but from all other machines it works all fine ? Yes - Disable Loop back check by adding BackConnectionHostNames reg key on CRM server or DisableLoopbackCheck reg key. follow below article to set these keys.

     

    http://support.microsoft.com/kb/896861?wa=wsignin1.0

     If you get a prompt and after you enter the credentials this means


    Arpita

    • Marked as answer by RoarCRM Monday, March 11, 2013 3:02 PM
    Wednesday, December 19, 2012 3:48 AM
  • Hi,

    Please check the Application pool setting for CRM website in IIS. Alos make the authentication as anonymus.. restart the iis and try to browse the URL..

    Regards,

    Pankaj

    Wednesday, December 19, 2012 5:30 AM