locked
Authentication error connecting report in BIDS with claims-based authentication RRS feed

  • Question

  • We have a Dynamics CRM 2011 install which has just been converted to use claims-based authentication, in order to support IFD.

    Everything works fine except that I cannot set up a client to use BIDS and CRM Fetch.

    The client I am working on has CRM working fine in Outlook.

    Here is what happens:

    1. I start a new report.

    2. In select Data Source, I leave the default type at Microsoft Dynamics CRM Fetch.

    3. In the Connection String I type:

    https://crm.ourdomain.com:444

    4. I click Next to connect and get the following error:

    Unable to connect to data source 'DataSource1'.An authentication error occurred while connecting  to server "https://crm.ourdomain.com:444/XRMServices/2011/Discovery.svc". Make sure that the credentials are correct, and try again.

    5. I have tried putting in a complete connection string including the HomeRealmUrl. I get the same error.

    Notes:

    I am confused abot the HomeRealmUrl as per http://technet.microsoft.com/en-us/library/gg188615.aspx

    We do not have a registry entry under HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MSCRMClient

    In fact, that key does not exist. I tried creating it and adding what I think is the HomeRealmUrl, but when I did that Outlook CRM stopped working with repeated auth prompts, which may be a clue.

    The HomeRealmUrl I used is https://adfs.ourdomain.com:444/adfs/services/trust/mex

    If I put this URL into the browser I get the XML for the service so it looks correct.

    Notes 2:

    I considered trying to use SQL instead. The user, who is an admin for Dynamics, does not have any permissions for SQL Server. I can add these but what is the best practice here, ie minimum SQL login to use reporting?

    Tim

    Friday, June 8, 2012 2:06 PM

All replies

  • You are almost done, when you miss a registry hive/key/tree in Win7/Server2k8R2 it might be due to permissions.

    Are you logged in with the user that installed CRM Client? is he a part of the Administrative group on the local machine?

    Saturday, June 9, 2012 7:24 AM
  • You are almost done, when you miss a registry hive/key/tree in Win7/Server2k8R2 it might be due to permissions.

    Are you logged in with the user that installed CRM Client? is he a part of the Administrative group on the local machine?

    Yes to both.

    Thanks

    Tim

    Saturday, June 9, 2012 7:57 AM
  • Then the key is missing, first step is to reinstall the client.

    Saturday, June 9, 2012 8:13 AM
  • Hmm, I cannot get to the same client machine over the weekend, but I am testing with another Windows 7 machine.

    When I install the CRM Client, no key is created at:

    HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MSCRMClient

    However there is a key created at:

    HKEY_LOCAL_MACHINE\Software\Microsoft\MSCRMClient

    I wonder if you are expected to create the key as well as the new string value?

    As before, CRM for Outlook connects fine without this key. I am trying BIDS now.

    Tim


    Saturday, June 9, 2012 1:06 PM
  • OK, I have now installed BIDS and the CRM extension on the test machine.

    The good news: it works! I successfully created a FetchXML report and previewed it.

    It looks like the registry key is not required.

    However I still do not know what is wrong on the other machine. Note: Outlook CRM works fine on both machines.

    The successful machine is not domain joined and I am connecting over the internet. The report loads slowly but it works.

    Tim

    Saturday, June 9, 2012 1:52 PM