We have a working CRM 2011 and a Sharepoint 2010 environment. The problem is that everytime a CRM user tries to view the 'documents' page for a certain Account (as example here). A popup is shown to ask the CRM user to login to sharepoint.

I've heard it should be posible to setup a single sign on so the credentials are passed from crm to sharepoint. But i can't find documentation for this.

Anyone here who knows how to set this up?

  • We have just set up ADFS for Office 365 and CRM internally using IFD for CRM and can confirm that the claims token received from one app is not usable in another app. I.e. had to sign in twice agianst the same ADFS proxy. once for CRM and once for Office365. Have not tested this with an internal SharePoint setup though.
    – user6671
    Feb 1 '12 at 3:08

There are two possible options

  • If you don't have enabled IFD (and therefore claims based authentication), the simplest solution would be to configure IE, to pass the credentials of the current windows user to the site. Therefore you have to adjust the security configuration of the zone assigned to the SharePoint URL, to send the credentials of the current windows user. See following screen shot: enter image description here

  • If you have enabled claims based authentication, the simplest solution would (IMHO) be to attach SharePoint to the same Token Service to which Dynamics CRM is attached. In this case it would be an instance of ADFSv2. See following links, which describe how to attach SharePoint to ADFSv2: Configuring SharePoint 2010 and ADFS v2 End to End or SharePoint 2010 and ADFS 2.0 the complete Step-by-Step guide

  • I just read your answer again and i noticed that this will pass my windows user to sharepoint. But i want to pass my CRM user credentials to sharepoint. I don't think this i going to work? Shall i need claims based authentication? Sep 20 '11 at 13:45
  • Independent of the decision whether you use claims or not you will always pass the windows user. Your crm user is tied to a specific windows user. If you really need the crm user, please describe your requirement in detail, as it is an uncommon approach/requirement.
    – ccellar
    Sep 20 '11 at 15:11
  • I tried the claims based method described in your first link. Everything went very well. Except that the article sais to use port 433 for my sharepoint webapplication. The problem is that this port is used for Version Control. Can't i use another port for this? Sep 20 '11 at 20:22
  • @ThomasDekiere to which article do you refer? You have to work with multiple bindings or multiple IP addresses (depends on your environment)
    – ccellar
    Oct 1 '11 at 8:31

Thomas, you can use port 443 to this effect.

  • 2
    please elaborate a bit to add more value on your answer Sep 22 '11 at 12:02

Single sign:

Office 365: Prepare for single sign-on

Office 365: Single sign-on: Roadmap

  • Welcome to SharePoint! While this may theoretically answer the question, we prefer inclusion of the essential parts of the answer here, and to provide the link for reference. See How to Answer for general guidelines.
    – Kit Menke
    Sep 19 '11 at 14:52

you can config it by GPO in active directory. ( for full article click this link )

But you can also config it in all of your clients from server.

Step 1: Open the Group Policy Editor by using Microsoft Management Console (MMC).

Step 2: Locate and click Internet Explorer Maintenance under Windows Settings in User Configuration.

Step 3: click on that OPTION THAT YOU WANT and change options

auto config internet explorer with GPO

like this, but remotely apply on all user you want.

Internet explorer option - setting

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.