Hi CRMBE,
If the scenario is :
you have a CRM 2011 server - joined to an Active directory domain , and you are trying to configure OL client from a client machine not joined to the domain ,
what you see is expected behavior.
When the CRM outlook client tries to connect to the server , if accesses the discovery service endpoint over anonymous auth.
There , it reads a similar information :
- <wsdl:service name="DiscoveryService">
- <wsdl:port name="CustomBinding_IDiscoveryService" binding="i0:CustomBinding_IDiscoveryService">
<soap12:address location="https://xaptcrm.newfrontier.eu/XrmServices/2011/Discovery.svc" />
- <wsa10:EndpointReference>
<wsa10:Address>https://xaptcrm.newfrontier.eu/XrmServices/2011/Discovery.svc</wsa10:Address>
- <Identity xmlns="http://schemas.xmlsoap.org/ws/2006/02/addressingidentity">
<Upn>domain\service</Upn>
</Identity>
</wsa10:EndpointReference>
</wsdl:port>
</wsdl:service>
</wsdl:definitions>
The client is expected to get a Kerberos ticket to the CRM appPool account , pack it into an XML and send it to the CRM server and authenticate itself , to receive any organization specific data .
if your client is not joined to the domain , you will never obtain the kerb ticket - causing the failure.
The caller was not authenticated by the service. ---> System.ServiceModel.FaultException: The request for security token could not be satisfied because authentication failed.
