Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
CRM asking for credentials when using outlook plugin RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote
    Hey so every time a user opens outlook and wants to use CRM it will ask for there user name and password. When they enter these in it will not work. Any ideas how to get this working? It is getting annoying to me and my users. We have it enabled to use IE to access CRM and that works with there credentials fyi. Thanks all!
    Monday, December 5, 2011 6:24 PM

Answers

  • Question
    Sign in to vote
    2
    Sign in to vote

    Pford0779,

    The pop-up message you get, is actually related with IFD, I think you actually trying to authenticate with IFD and you don't have it configured that's why you can't authenticate. You have 3 external Registry keys on your registry:

    Key: ExtranetServerUrl
    Key: ExtranetWebAppUrl
    Key: ExtranetDiscoveryUrl

    the above keys are used for the Outlook client when on the internet, it does sound you don't have this configured for external access although you did configure IFD, delete the above keys and the pop-up will go away.

    You can populate the keys again by running the configuration wizard again.

    Btw this works by design, and unfortunately this pop-up is quite annoying, there are a few registry keys to stop the pop-up popping up so often in case you don't want to completely delete the registry keys.

    Have a look at this:
    http://quantusdynamics.blogspot.com/2011/12/crm-40-ifd-dmz-secure-deployment.html

    see if this helps and let us know.

     

    Visit my blog for CRM material, improving performance, kerberos, IFD, development tips, etc. :) http://quantusdynamics.blogspot.com






    • Edited by nrodri Monday, January 16, 2012 5:17 PM
    • Proposed as answer by nrodri Tuesday, January 17, 2012 10:45 AM
    • Marked as answer by Pford0779 Wednesday, February 1, 2012 4:27 PM
    Monday, January 16, 2012 4:45 PM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote
    Still have this issue can anyone PLEASE HELP with this.
    Friday, January 13, 2012 7:29 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Usually CRM uses your active directory credentials.  Are you using Citrix networking or something to that effect.  Using other than Microsoft networking products can sometimes cause issues.

    http://social.microsoft.com/Forums/en/crm/thread/c1b5cc02-db38-44a0-8da4-887d5825f9fb

     

    Jamie Miley
    Check out my about.me profile!
    http://mileyja.blogspot.com
    Linked-In Profile
    Follow Me on Twitter!
    Sunday, January 15, 2012 12:04 AM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello,

    Thanks for the reply. We are not using Citrix networking or anything like that. We have a CRM server here on our network. As for signing in CRM will sign in when you connect to it via IE but will not when outlook is being used. That is where i am lost. The credentials for the users work there but not with the outlook plug in. In other info would be nice. Thanks!

    Monday, January 16, 2012 1:17 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Pford0779,

    Your issue sounds that authentication is not configured correctly.

    The first thing to check would be what kind of authentication the client computer is trying to negotiate with the server, to check this you run fiddler and check the package headers.

    A few questions:

    1. Do you have one server with all the roles, or a multi role environment?

    2. when you type the credentials I guess you are able to authenticate?

    3. you running your IIS Application pool with a domain account? Try changing it to network service does it help?

    You may want to try and configure Kerberos on your environment is not difficult and will improve performance:

    http://quantusdynamics.blogspot.com/2011/12/extreme-performance-with-dynamics-crm.html

     

    Regards

    Nuno

    Visit my blog for CRM material, improving performance, kerberos, IFD, development tips, etc. :) http://quantusdynamics.blogspot.com
    Monday, January 16, 2012 1:50 PM
  • Question
    Sign in to vote
    2
    Sign in to vote
    Another easy thing to check is that the CRM website URL has been added to the user's listed of Trusted Sites or Intranet Sites in IE.

    Neil Benson, CRM Addict and MVP at Customery Ltd. You can reach me on LinkedIn or Twitter. Join over 10,000 other CRM professionals on the Microsoft Dynamics CRM group on LinkedIn.

    Monday, January 16, 2012 2:10 PM
    Moderator
  • Question
    Sign in to vote
    1
    Sign in to vote

    We have this issue in our environment the short answer is you need to make sure you have the exact URL you use to access CRM in your local intranet sites list. 

    Internet Options -> Security -> Local Intranet -> Sites -> Advanced

    Be aware when adding your site to this list that adding a wildcard will not work in this case it needs to be the exact URL that you use to access CRM. So if I work at foo.com having *.foo.com in the local intranet list will not work, if this is done the plugin will still add the specific site to the trusted hosts and authentication will still be broken. You need to add the exact CRM host ex. https://crm.foo.com/ when the outlook plugin sees this in the local intranet list it will skip the step of adding the URL to the trusted sites list and authentication will work successfully. As an easy solution I suggest just pushing this change out to all hosts via group policy, if you do not use group policy then you will need to manually go and add this URL to the local intranet sites.  

     

    I did a longer writeup of this on my blog:

    http://matthewchurilla.blogspot.com/2012/01/outlook-plugin-is-nice-feature-of.html

    Monday, January 16, 2012 2:21 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thanks for all of your replies but they did not work. This is what i get when i try to sign in to the Outlook plugin. I know the Credentials are correct as I can use them to sign into the webapp for CRM. This is the problem that has been driving me crazy because no matter what i do it always fails to connect. I tried the Intranet sites and it still does not want to work for me. Any other ideas? Thanks again, I appreciate the ideas so far.

    Monday, January 16, 2012 3:59 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Are you using AD integrated authentication or do users have individual accounts? 

     

    Edit:  Also have you tried running the diagnostics tool to see if it returns any errors?

    Visit my Blog: http://matthewchurilla.blogspot.com/
    Monday, January 16, 2012 4:05 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    AD integrated into it. I use the same password and username for getting on to the web app as i do for the network log-in.
    Monday, January 16, 2012 4:07 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    I would try running the diagnostics tool and see if that gives you any error messages. 

     

    If that doesn't help I would turn on tracing: http://support.microsoft.com/kb/907490 and see if that writes out a better stack trace to the trace logs.

    Visit my Blog: http://matthewchurilla.blogspot.com/
    Monday, January 16, 2012 4:10 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Ok so i ran the Diag and this is what it found. The CRM add-in is not disabled.
    Monday, January 16, 2012 4:19 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    I'd move on to tracing then.  Turn it on and you should get a nice exception message in the trace log.  You can post that here and someone might be able to help.
    Visit my Blog: http://matthewchurilla.blogspot.com/
    Monday, January 16, 2012 4:22 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    In addition, you might want to check the event log on your CRM server to see if it is writing anything to the Application or Security logs.
    Visit my Blog: http://matthewchurilla.blogspot.com/
    Monday, January 16, 2012 4:25 PM
  • Question
    Sign in to vote
    2
    Sign in to vote

    Pford0779,

    The pop-up message you get, is actually related with IFD, I think you actually trying to authenticate with IFD and you don't have it configured that's why you can't authenticate. You have 3 external Registry keys on your registry:

    Key: ExtranetServerUrl
    Key: ExtranetWebAppUrl
    Key: ExtranetDiscoveryUrl

    the above keys are used for the Outlook client when on the internet, it does sound you don't have this configured for external access although you did configure IFD, delete the above keys and the pop-up will go away.

    You can populate the keys again by running the configuration wizard again.

    Btw this works by design, and unfortunately this pop-up is quite annoying, there are a few registry keys to stop the pop-up popping up so often in case you don't want to completely delete the registry keys.

    Have a look at this:
    http://quantusdynamics.blogspot.com/2011/12/crm-40-ifd-dmz-secure-deployment.html

    see if this helps and let us know.

     

    Visit my blog for CRM material, improving performance, kerberos, IFD, development tips, etc. :) http://quantusdynamics.blogspot.com






    • Edited by nrodri Monday, January 16, 2012 5:17 PM
    • Proposed as answer by nrodri Tuesday, January 17, 2012 10:45 AM
    • Marked as answer by Pford0779 Wednesday, February 1, 2012 4:27 PM
    Monday, January 16, 2012 4:45 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    nrodri points out a good thing i've never done IFD.  His post also reminded me that once you add you site to the Local Intranet zone you need to uninstall and re-install the outlook plugin.  It does the test for site in the local intranet zone upon install.  I forgot this since we did this last year...hopefully you'll get there soon.
    Visit my Blog: http://matthewchurilla.blogspot.com/
    Monday, January 16, 2012 5:57 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

     

    Hi Pford0779,

    Did the above fix or helped towards the resolution of your issue?

    If you can please mark as answered or helpful, this helps others to identify the same issues and resolved them quicker.

    Thank you

    Visit my blog for CRM material, improving performance, kerberos, IFD, development tips, etc. :) http://quantusdynamics.blogspot.com
    Wednesday, January 18, 2012 10:21 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Hey sorry been busy with a move. We havent had time to try the IFD fix but we will here soon and ill let you guys know. Thanks again for the input. If that solves it i will come back and mark it as an answer.
    Wednesday, January 25, 2012 1:15 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Did you happen to install the intial release of UR6? I did and subsequently had all kinds of Outlook client problems. I have an IFD installation and the browser based client worked fine but the Outlook client was really messed up. I would get the "Cannot connect... cannot authenticate.." error.  I installed the recent UR6 re-release and the Outlook client is happy again.

    Matt

    Wednesday, January 25, 2012 7:34 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    OK the IFD was the issue. Thanks for all your help! I appreciate it! You guys have a good one!
    Wednesday, February 1, 2012 4:29 PM