locked
Changing the ADFS password within a domain that has MS CRM implemented RRS feed

  • Question

  • Hello,

    I am able to change the Active Directory Federation Services administrator account (ADFS_Service) password within our Active Directory server. However, when I do this, MS CRM becomes inaccessible.

    Is there a way to flush the ADFS change through so that CRM sees this, or do I need to change the ADFS password in a CRM location?

    Many thanks.

    Keith


    R K Howard

    Friday, January 29, 2016 3:40 PM

Answers

  • Hello,

    I was able to find out the answer. The article pointed me in the right direction, but the two services for which the password need to be reset are as follows:

    >Active Directory Federation Services

    >Device Registration Service

    Many thanks.

    Keith


    R K Howard

    Monday, February 1, 2016 10:53 PM

All replies

  • Depending on the version of Windows on which your ADFS is installed you need to update the password in additional places. For example, this article https://technet.microsoft.com/en-us/library/hh344806%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396 describes changing the password for ADFS2.0 when using the Windows Internal database (as opposed to a SQL Server database for ADFS).
    Monday, February 1, 2016 1:13 PM
    Moderator
  • Hello,

    Thanks for the link. We are using ADFS 3.0.

    Do you think that the same (or a similar) procedure is required?

    Regards,

    Keith


    R K Howard

    Monday, February 1, 2016 1:34 PM
  • No I think not because ADFS 3.0 does not use IIS.

    I can't think of a reason for CRM to care what the ADFS service account or password is - unless that account has been used for a CRM service, but I would be surprised if that was the case.

    Monday, February 1, 2016 1:46 PM
    Moderator
  • Hi.

    Well there is some linkage, because my CRM implementation goes down when I change the ADFS password.

    I guess I will keep looking.

    Thanks for the article.

    Keith


    R K Howard

    Monday, February 1, 2016 4:19 PM
  • Do you get any error messages that might help pinpoint the problem?

    Monday, February 1, 2016 4:59 PM
    Moderator
  • Hello,

    I was able to find out the answer. The article pointed me in the right direction, but the two services for which the password need to be reset are as follows:

    >Active Directory Federation Services

    >Device Registration Service

    Many thanks.

    Keith


    R K Howard

    Monday, February 1, 2016 10:53 PM