Tell me more ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.
up vote 3 down vote favorite
2

We have a working CRM 2011 and a Sharepoint 2010 environment. The problem is that everytime a CRM user tries to view the 'documents' page for a certain Account (as example here). A popup is shown to ask the CRM user to login to sharepoint.

I've heard it should be posible to setup a single sign on so the credentials are passed from crm to sharepoint. But i can't find documentation for this.

Anyone here who knows how to set this up?

share|improve this question
We have just set up ADFS for Office 365 and CRM internally using IFD for CRM and can confirm that the claims token received from one app is not usable in another app. I.e. had to sign in twice agianst the same ADFS proxy. once for CRM and once for Office365. Have not tested this with an internal SharePoint setup though. – user6671 Feb 1 '12 at 3:08

migrated from stackoverflow.com Sep 19 '11 at 12:06

4 Answers

up vote 3 down vote accepted

There are two possible options

  • If you don't have enabled IFD (and therefore claims based authentication), the simplest solution would be to configure IE, to pass the credentials of the current windows user to the site. Therefore you have to adjust the security configuration of the zone assigned to the SharePoint URL, to send the credentials of the current windows user. See following screen shot: enter image description here

  • If you have enabled claims based authentication, the simplest solution would (IMHO) be to attach SharePoint to the same Token Service to which Dynamics CRM is attached. In this case it would be an instance of ADFSv2. See following links, which describe how to attach SharePoint to ADFSv2: Configuring SharePoint 2010 and ADFS v2 End to End or SharePoint 2010 and ADFS 2.0 the complete Step-by-Step guide

share|improve this answer
I just read your answer again and i noticed that this will pass my windows user to sharepoint. But i want to pass my CRM user credentials to sharepoint. I don't think this i going to work? Shall i need claims based authentication? – Thomas Dekiere Sep 20 '11 at 13:45
Independent of the decision whether you use claims or not you will always pass the windows user. Your crm user is tied to a specific windows user. If you really need the crm user, please describe your requirement in detail, as it is an uncommon approach/requirement. – ccellar Sep 20 '11 at 15:11
I tried the claims based method described in your first link. Everything went very well. Except that the article sais to use port 433 for my sharepoint webapplication. The problem is that this port is used for Version Control. Can't i use another port for this? – Thomas Dekiere Sep 20 '11 at 20:22
@ThomasDekiere to which article do you refer? You have to work with multiple bindings or multiple IP addresses (depends on your environment) – ccellar Oct 1 '11 at 8:31
up vote 1 down vote

Thomas, you can use port 443 to this effect.

share|improve this answer
1  
please elaborate a bit to add more value on your answer – Anders Rask♦ Sep 22 '11 at 12:02
up vote 0 down vote

Single sign:

Office 365: Prepare for single sign-on

Office 365: Single sign-on: Roadmap

share|improve this answer
Welcome to SharePoint! While this may theoretically answer the question, we prefer inclusion of the essential parts of the answer here, and to provide the link for reference. See How to Answer for general guidelines. – Kit Menke♦ Sep 19 '11 at 14:52
up vote 0 down vote

you can config it by GPO in active directory. ( for full article click this link )

But you can also config it in all of your clients from server.

Step 1: Open the Group Policy Editor by using Microsoft Management Console (MMC).

Step 2: Locate and click Internet Explorer Maintenance under Windows Settings in User Configuration.

Step 3: click on that OPTION THAT YOU WANT and change options

auto config internet explorer with GPO

like this, but remotely apply on all user you want.

Internet explorer option - setting

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.