Accessing Microsoft Dynamics 365 over IFD results in error "The same client browser session has made '6' requests in the last '1' seconds.

Symptom

After configuring Microsoft Dynamics 365 with claims authentication and Internet Facing Deployment (IFD), users are not able to access Microsoft Dynamics 365 using IFD and the following error is displayed in the Event Viewer on the Active Directory Federation Server (ADFS)

Exception details: Microsoft.IdentityServer.Web.InvalidRequestException: MSIS7042: The same client browser session has made '6' requests in the last '2' seconds. Contact your administrator for details.
at Microsoft.IdentityServer.Web.Protocols.PassiveProtocolHandler.UpdateLoopDetectionCookie(WrappedHttpListenerContext context) at Microsoft.IdentityServer.Web.Protocols.PassiveProtocolHandler.ProcessCommonCookiesInLastAuthenticationStage(ProtocolContext context) at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationProtocolHandler.SendSignInResponse(WSFederationContext context, MSISSignInResponse response) at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationProtocolHandler.Process(ProtocolContext context) at Microsoft.IdentityServer.Web.PassiveProtocolListener.ProcessProtocolRequest(ProtocolContext protocolContext, PassiveProtocolHandler protocolHandler) at Microsoft.IdentityServer.Web.PassiveProtocolListener.OnGetContext(WrappedHttpListenerContext context)

Cause

One possible reason this error is occurring is that the external Host (A) DNS records that were created for IFD have not been added to the Trusted Sites list in Internet Explorer settings.

Resolution

Add the IFD DNS records to Internet Explorer Trusted Sites. This should included the Dynamics 365 organization name record, the Dynamics 365 discovery web service record, the ADFS record along with the Dynamics 365 IFD federation endpoint record.

For Example:
CRM2016.Contoso.com - Dynamics 365 organization name record
Dev.Contoso.com - Dynamics 365 discovery web service record
ADFS.Contoso.com - ADFS record
Auth.Contoso.com - Dynamics 365 IFD federation endpoint record

1. On the client computer, open the Control Panel and then click Internet Options.
2. Click the Security tab.
3. Click Trusted Sites and then click the Sites button.
4. For each of the above DNS Host (A) records, enter each one individually in the field "Add this website to the zone:" and then click the Add button.

Asset not found 

More Information

For more information on Microsoft Dynamics 365 IFD configuration, please see the following setup guide.

Eigenschaften

Artikelnummer: 4012055 – Letzte Überarbeitung: 02.02.2017 – Revision: 4

Feedback