Geeks Blog - All Comments

re: Placing dynamic contact image in CRM form

Kelvin Davies — Mon, 13 May 2013 14:59:13 GMT

You should convert the image to byte[] and then to string. This can then be stored to a attribute in CRM ;-)

re: Implementing Single Sign on using Custom ASPX page in Microsoft Dynamics CRM 2011.

turlapativishnu — Thu, 21 Feb 2013 11:49:46 GMT

Hi Younes,

You have to give proper permissions for the certificate used in the custom page. Please add proper permissions for the security that is used in the page.

re: Implementing Single Sign on using Custom ASPX page in Microsoft Dynamics CRM 2011.

Younes — Wed, 13 Feb 2013 09:54:18 GMT

Hi Vishnu,

I followed your steps but i am getting the following error:

The X.509 certificate CN=ADFS Signing - sts1.jfknudtzen.no is not in the trusted people store. The X.509 certificate CN=ADFS Signing - sts1.jfknudtzen.no chain building failed. The certificate that was used has a trust chain that cannot be verified. Replace the certificate or change the certificateValidationMode. A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.

re: Implementing Single Sign on using Custom ASPX page in Microsoft Dynamics CRM 2011.

turlapativishnu — Tue, 12 Feb 2013 08:08:42 GMT

Great Anil,

Thanks for the update.

re: Implementing Single Sign on using Custom ASPX page in Microsoft Dynamics CRM 2011.

Anil Chelasani — Wed, 23 Jan 2013 05:46:08 GMT

Too late but, I have removed the Encryption on relying party trust to make it work.

Thank you very much Vishnu.

re: Implementing Single Sign on using Custom ASPX page in Microsoft Dynamics CRM 2011.

Anil Chelasani — Thu, 18 Oct 2012 09:12:53 GMT

I checked it. We already have Full Access for Network Service under

"Cosole-->Add Certificate Snap-in-->Computer Account-->Personal-->Certificate-->Manage Private Keys-->Full Access to Network Service"

I am still getting the same issue. I doubt something wrong with the Accepted Claims. Can you please share that screen or the list of claims available in your configuration

From my side, I have Role and Name. will there be any prob becaue I lost UPN in this list.

re: Implementing Single Sign on using Custom ASPX page in Microsoft Dynamics CRM 2011.

turlapativishnu — Mon, 15 Oct 2012 06:24:37 GMT

Hi Anil,

Looks like you do not have permissions for your Security Certificate. So open your management console and add Network Service user permissions to the certificate.

Please let me know if you have any questions.

re: Implementing Single Sign on using Custom ASPX page in Microsoft Dynamics CRM 2011.

Anil Chelasani — Thu, 04 Oct 2012 10:38:38 GMT

Hi Vishnu,

Thanks for the detailed article for which I have been waiting for. I have been trying to implement single sign on and had some problems

I followed your steps and able to get the login page. Once I enter the credentials I am getting error and below is the Error detail from Event Viewer ADFS Admin section

Encountered error during federation passive request.

Additional Data

Exception details:

Microsoft.IdentityServer.Web.RequestFailedException: MSIS7012: An error occurred while processing the request. Contact your administrator for details. ---> System.ServiceModel.FaultException: ID3242: The security token could not be authenticated or authorized.

at Microsoft.IdentityServer.Protocols.WSTrust.WSTrustClientManager.Issue(Message request, WCFResponseData responseData)

at Microsoft.IdentityServer.Protocols.WSTrust.WSTrustClient.Issue(RequestSecurityToken rst, WCFResponseData responseData)

at Microsoft.IdentityServer.Web.FederationPassiveAuthentication.SubmitRequest(MSISRequestSecurityToken request)

--- End of inner exception stack trace ---

at Microsoft.IdentityServer.Web.FederationPassiveAuthentication.SubmitRequest(MSISRequestSecurityToken request)

at Microsoft.IdentityServer.Web.FederationPassiveAuthentication.RequestBearerToken(MSISSignInRequestMessage signInRequest, SecurityTokenElement onBehalfOf, SecurityToken primaryAuthToken, String desiredTokenType, Uri& replyTo)

at Microsoft.IdentityServer.Web.FederationPassiveAuthentication.BuildSignInResponseCoreWithSerializedToken(String signOnToken, WSFederationMessage incomingMessage)

at Microsoft.IdentityServer.Web.FederationPassiveAuthentication.BuildSignInResponseCoreWithSecurityToken(SecurityToken securityToken, WSFederationMessage incomingMessage)

at Microsoft.IdentityServer.Web.FederationPassiveAuthentication.BuildSignInResponseForProtocolRequest(FederationPassiveContext federationPassiveContext, SecurityToken securityToken)

at Microsoft.IdentityServer.Web.FederationPassiveAuthentication.BuildSignInResponse(SecurityToken securityToken)

System.ServiceModel.FaultException: ID3242: The security token could not be authenticated or authorized.

at Microsoft.IdentityServer.Protocols.WSTrust.WSTrustClientManager.Issue(Message request, WCFResponseData responseData)

at Microsoft.IdentityServer.Protocols.WSTrust.WSTrustClient.Issue(RequestSecurityToken rst, WCFResponseData responseData)

at Microsoft.IdentityServer.Web.FederationPassiveAuthentication.SubmitRequest(MSISRequestSecurityToken request)

I am missing Step 15, I am not getting signing certificate chain validation error when configuring STS. And also Can you please share one more screen shot of the Accepted Claims from Relying Party Trust

Thank you in advance

-- Anil

re: Placing dynamic contact image in CRM form

turlapativishnu — Wed, 20 Jun 2012 03:23:46 GMT

You have to write the javascript code in form load event of contact entity,

re: Placing dynamic contact image in CRM form

Sai Krishna Yadav — Mon, 21 May 2012 11:48:18 GMT

Hi Vishnu,

How r u? i tried the same way but i am getting the error Xrm.Page.getAttribute('') is null or not an object..

try to help me on this, as i am new to CRM 2011 and where i need to write the Javascript code?