"Access is denied" error when attempting to connect Microsoft Dynamics CRM for Office Outlook
When attempting to connect Microsoft Dynamics CRM for Office Outlook with an On-Premises CRM organization and do not include the organization name in the Claims Based Authentication URL, you encounter the following error message:
"Cannot connect to Microsoft Dynamics CRM server because we cannot authenticate your credentials.
Check your connection or contact your administrator for more help."
Microsoft Dynamics CRM for Office Outlook was unable to authenticate you because the organization name was not included in the URL.
Provide the organization name as part of the Claims Based Authentication URL when configuring the Microsoft Dynamics CRM for Office Outlook client.
Example URL Format: https://<crmservername>.<domain>.<domainsuffix>/<orgname>
Example URL: https://crmserver.contoso.com/contoso
NOTE: If you have your Microsoft Dynamics CRM organization configured as an Internet Facing Deployment (IFD), you can also access via your IFD URL which includes the organization name:
Example IFD URL Format: https://<orgname>.<domain>.<domainsuffix>
Example IFD URL: https://contoso.contoso.com
When you click Details, the following additional information appears and is also available in the log file:
Access is denied.
Server stack trace:
at System.ServiceModel.Channels.ServiceChannel.ThrowIfFaultUnderstood(Message reply, MessageFault fault, String action, MessageVersion version, FaultConverter faultConverter)
at System.ServiceModel.Channels.ServiceChannel.HandleReply(ProxyOperationRuntime operation, ProxyRpc& rpc)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object ins, Object outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at :
at System.Windows.Forms.Control.MarshaledInvoke(Control caller, Delegate method, Object args, Boolean synchronous)
at System.Windows.Forms.Control.Invoke(Delegate method, Object args)
at System.Windows.Forms.Control.Invoke(Delegate method)
at Microsoft.Crm.Outlook.ClientAuth.ClientAuthProvider`1.RetrieveUserCredentialsAndSignIn(Control parentWindow, Boolean retryOnError, IClientOrganizationContext context)
at Microsoft.Crm.Outlook.ClientAuth.ClientAuthProvider`1.SignIn(AuthUIMode uiMode, IClientOrganizationContext context, Control parentWindow, Boolean retryOnError)
at Microsoft.Crm.Application.Outlook.Config.DeploymentsInfo`1.DeploymentInfo`1.LoadOrganizationsInternal(AuthUIMode uiMode, Control parentWindow)
at Microsoft.Crm.Application.Outlook.Config.DeploymentsInfo`1.DeploymentInfo`1.LoadOrganizations(AuthUIMode uiMode, Control parentWindow, IClientAuthProvider`1 authenticatedProvider)
at Microsoft.Crm.Application.Outlook.Config.DeploymentsInfo`1.InternalLoadOrganizations(DataCollection`1 orgs, AuthUIMode uiMode, Control parentWindow)
Article ID: 3088205 - Last Review: 08/10/2015 20:22:00 - Revision: 1.0
Microsoft Dynamics CRM 2015, Microsoft Dynamics CRM 2013, Microsoft Dynamics CRM for Microsoft Office Outlook
- kbmbsmigrate kbsurveynew KB3088205