Asked by:
Authentication error connecting report in BIDS with claims-based authentication

Question
-
We have a Dynamics CRM 2011 install which has just been converted to use claims-based authentication, in order to support IFD.
Everything works fine except that I cannot set up a client to use BIDS and CRM Fetch.
The client I am working on has CRM working fine in Outlook.
Here is what happens:
1. I start a new report.
2. In select Data Source, I leave the default type at Microsoft Dynamics CRM Fetch.
3. In the Connection String I type:
4. I click Next to connect and get the following error:
Unable to connect to data source 'DataSource1'.An authentication error occurred while connecting to server "https://crm.ourdomain.com:444/XRMServices/2011/Discovery.svc". Make sure that the credentials are correct, and try again.
5. I have tried putting in a complete connection string including the HomeRealmUrl. I get the same error.
Notes:
I am confused abot the HomeRealmUrl as per http://technet.microsoft.com/en-us/library/gg188615.aspx
We do not have a registry entry under HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MSCRMClient
In fact, that key does not exist. I tried creating it and adding what I think is the HomeRealmUrl, but when I did that Outlook CRM stopped working with repeated auth prompts, which may be a clue.
The HomeRealmUrl I used is https://adfs.ourdomain.com:444/adfs/services/trust/mex
If I put this URL into the browser I get the XML for the service so it looks correct.
Notes 2:
I considered trying to use SQL instead. The user, who is an admin for Dynamics, does not have any permissions for SQL Server. I can add these but what is the best practice here, ie minimum SQL login to use reporting?
Tim
Friday, June 8, 2012 2:06 PM
All replies
-
You are almost done, when you miss a registry hive/key/tree in Win7/Server2k8R2 it might be due to permissions.
Are you logged in with the user that installed CRM Client? is he a part of the Administrative group on the local machine?
Saturday, June 9, 2012 7:24 AM -
You are almost done, when you miss a registry hive/key/tree in Win7/Server2k8R2 it might be due to permissions.
Are you logged in with the user that installed CRM Client? is he a part of the Administrative group on the local machine?
Yes to both.
Thanks
Tim
Saturday, June 9, 2012 7:57 AM -
Then the key is missing, first step is to reinstall the client.
Saturday, June 9, 2012 8:13 AM -
Hmm, I cannot get to the same client machine over the weekend, but I am testing with another Windows 7 machine.
When I install the CRM Client, no key is created at:
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MSCRMClient
However there is a key created at:
HKEY_LOCAL_MACHINE\Software\Microsoft\MSCRMClient
I wonder if you are expected to create the key as well as the new string value?
As before, CRM for Outlook connects fine without this key. I am trying BIDS now.
Tim
- Edited by Tim Anderson Saturday, June 9, 2012 1:07 PM
Saturday, June 9, 2012 1:06 PM -
OK, I have now installed BIDS and the CRM extension on the test machine.
The good news: it works! I successfully created a FetchXML report and previewed it.
It looks like the registry key is not required.
However I still do not know what is wrong on the other machine. Note: Outlook CRM works fine on both machines.
The successful machine is not domain joined and I am connecting over the internet. The report loads slowly but it works.
Tim
Saturday, June 9, 2012 1:52 PM