Hi,
We had ADFS authentication problems. Somehow the server had duplicate SPN registered, one for admin user and the other one for the server. They were causing Kerberos authentication to fail and hence ADFS wasn’t able to authenticate users. we fixed that and reconfigured IFD for CRM. The only problem that we are getting now is when going to CRM using port 444 (https://abc.org.com:444) I’m getting an exception. It’s working fine on HTTP port 5555. Could be it’s happening because when adding CRM’s Relying Party Trust in ADFS the last Rule for “Windows Account Name” should be outgoing as “Name”, in ADFS and we can only find “* Name”. we are not sure why ADFS doesn’t show us Name but I think ADFS 2 has it this way. If any one knows why this is happening and how to fix it, that’d be awesome and should restore complete CRM functionality.
Please tell me if you’ve any input on it.