"Access is denied" error when attempting to connect Microsoft Dynamics CRM for Office Outlook

When attempting to connect Microsoft Dynamics CRM for Office Outlook with an On-Premises CRM organization and do not include the organization name in the Claims Based Authentication URL, you encounter the following error message:

"Cannot connect to Microsoft Dynamics CRM server because we cannot authenticate your credentials. 

Check your connection or contact your administrator for more help."

Microsoft Dynamics CRM for Office Outlook was unable to authenticate you because the organization name was not included in the URL.
Provide the organization name as part of the Claims Based Authentication URL when configuring the Microsoft Dynamics CRM for Office Outlook client.

Example URL Format: https://<crmservername>.<domain>.<domainsuffix>/<orgname>
Example URL: https://crmserver.contoso.com/contoso

NOTE: If you have your Microsoft Dynamics CRM organization configured as an Internet Facing Deployment (IFD), you can also access via your IFD URL which includes the organization name:

Example IFD URL Format: https://<orgname>.<domain>.<domainsuffix>
Example IFD URL: https://contoso.contoso.com
More information
When you click Details, the following additional information appears and is also available in the log file:

Access is denied.

Server stack trace:
   at System.ServiceModel.Channels.ServiceChannel.ThrowIfFaultUnderstood(Message reply, MessageFault fault, String action, MessageVersion version, FaultConverter faultConverter)
   at System.ServiceModel.Channels.ServiceChannel.HandleReply(ProxyOperationRuntime operation, ProxyRpc& rpc)
   at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
   at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)

Exception rethrown at [0]:
   at System.Windows.Forms.Control.MarshaledInvoke(Control caller, Delegate method, Object[] args, Boolean synchronous)
   at System.Windows.Forms.Control.Invoke(Delegate method, Object[] args)
   at System.Windows.Forms.Control.Invoke(Delegate method)
   at Microsoft.Crm.Outlook.ClientAuth.ClientAuthProvider`1.RetrieveUserCredentialsAndSignIn(Control parentWindow, Boolean retryOnError, IClientOrganizationContext context)
   at Microsoft.Crm.Outlook.ClientAuth.ClientAuthProvider`1.SignIn(AuthUIMode uiMode, IClientOrganizationContext context, Control parentWindow, Boolean retryOnError)
   at Microsoft.Crm.Application.Outlook.Config.DeploymentsInfo`1.DeploymentInfo`1.LoadOrganizationsInternal(AuthUIMode uiMode, Control parentWindow)
   at Microsoft.Crm.Application.Outlook.Config.DeploymentsInfo`1.DeploymentInfo`1.LoadOrganizations(AuthUIMode uiMode, Control parentWindow, IClientAuthProvider`1 authenticatedProvider)
   at Microsoft.Crm.Application.Outlook.Config.DeploymentsInfo`1.InternalLoadOrganizations(DataCollection`1 orgs, AuthUIMode uiMode, Control parentWindow)

Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.

Article ID: 3088205 - Last Review: 08/10/2015 20:22:00 - Revision: 1.0

Microsoft Dynamics CRM 2015, Microsoft Dynamics CRM 2013, Microsoft Dynamics CRM for Microsoft Office Outlook

  • kbmbsmigrate kbsurveynew KB3088205