Answered by:
Changing the ADFS password within a domain that has MS CRM implemented

Question
-
Hello,
I am able to change the Active Directory Federation Services administrator account (ADFS_Service) password within our Active Directory server. However, when I do this, MS CRM becomes inaccessible.
Is there a way to flush the ADFS change through so that CRM sees this, or do I need to change the ADFS password in a CRM location?
Many thanks.
Keith
R K Howard
Friday, January 29, 2016 3:40 PM
Answers
-
Hello,
I was able to find out the answer. The article pointed me in the right direction, but the two services for which the password need to be reset are as follows:
>Active Directory Federation Services
>Device Registration Service
Many thanks.
Keith
R K Howard
- Marked as answer by DavidJennawayMVP, Moderator Tuesday, February 2, 2016 12:03 PM
Monday, February 1, 2016 10:53 PM
All replies
-
Depending on the version of Windows on which your ADFS is installed you need to update the password in additional places. For example, this article https://technet.microsoft.com/en-us/library/hh344806%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396 describes changing the password for ADFS2.0 when using the Windows Internal database (as opposed to a SQL Server database for ADFS).Monday, February 1, 2016 1:13 PMModerator
-
Hello,
Thanks for the link. We are using ADFS 3.0.
Do you think that the same (or a similar) procedure is required?
Regards,
Keith
R K Howard
Monday, February 1, 2016 1:34 PM -
No I think not because ADFS 3.0 does not use IIS.
I can't think of a reason for CRM to care what the ADFS service account or password is - unless that account has been used for a CRM service, but I would be surprised if that was the case.
Monday, February 1, 2016 1:46 PMModerator -
Hi.
Well there is some linkage, because my CRM implementation goes down when I change the ADFS password.
I guess I will keep looking.
Thanks for the article.
Keith
R K Howard
Monday, February 1, 2016 4:19 PM -
Do you get any error messages that might help pinpoint the problem?
Monday, February 1, 2016 4:59 PMModerator -
Hello,
I was able to find out the answer. The article pointed me in the right direction, but the two services for which the password need to be reset are as follows:
>Active Directory Federation Services
>Device Registration Service
Many thanks.
Keith
R K Howard
- Marked as answer by DavidJennawayMVP, Moderator Tuesday, February 2, 2016 12:03 PM
Monday, February 1, 2016 10:53 PM