Dynamics CRM integration with SiteMinder via ADFS

It’s important that we integrate Microsoft products together with 3rd party identity providers. This allows us to execute on our mission to empower everyone on the planet to do more and achieve more. Understanding how we use federated identities to connect users with CRM services is critical to achieving this. This post will detail the…


How to find which Active Directory security groups belong to your CRM deployment

Have you tried to locate the Active Directory security groups that belong to your Dynamics CRM deployment only to find results like this? First off, why would you ever get results like this?  Dynamics CRM 2011 installs 4 Active Directory Security Groups (PrivReportingGroup, SQLAccessGroup, ReportingGroup and PrivUserGroup) by default per deployment.  Some people think this…

14

CRM 2011 Service Principal Names (SPN) generation and usage

When we implement CRM 2011 we always hear or read the term Service Principal Name (SPN) for accurate Kerberos Authentication; however, sometimes understanding Kerberos Authentication is time consuming and needs experience. Sean has written a detailed blog explaining Kerberos Authentication here. Identifying the right SPNs can be daunting and it would be really nice if…

9

Kerberos in Load Balanced Environments

A very common topic we tend to get many questions on is delegation and troubleshooting delegation usually via one of the many topics that impact this: SPN’s, Kerberos, Load Balancers, 401 errors, etc. Many times detailed environment knowledge is required to make any conclusions, so rather than documenting a complex flowchart that covers every possible…

23

Walkthrough: Easily locate objects in ActiveDirectory by Guid

Often times we have the need to confirm the location of the CRM Groups in Active Directory (AD) or find what AD object a user account in CRM is pointed to.  Most recently our team had to re-image a server and as part of that process we had to confirm the location of all our…

5