Azure Data Factory Linked Service using Dynamics CRM

Kristy Wilhelm 20

User's image

Failing to Login when using a Service Principal ID/Key to either Dynamics CRM or Dataverse Linked Service. How do I get it to not try logging into CRM as 'Anonymous' or how do I add permissions into CRM to allow this to connect?

Harishga 5,990 Reputation points Microsoft Vendor

2024-04-04T10:36:18.1566667+00:00

@Kristy Wilhelm

Welcome to Microsoft Q&A platform and thanks for posting your question here.

The error message states that the authentication method used to connect to Dynamics CRM is not recognized or accepted by the server.

This can happen due to various reasons, such as incorrect service URI, firewall or proxy issues, incorrect username and password, or incorrect organization name or CRM region identifier.

If you are using a Self-Hosted Integration Runtime, ensure that the firewall or proxy does not intercept the requests to the Dynamics server.

The authentication error occurs because the authentication method used to connect to Dynamics CRM or Dataverse is not supported or is not configured correctly. The ‘Anonymous’ client authentication scheme is not allowed because it is not secure. This authentication method does not provide any form of authentication or authorization, and it allows anyone to access the resource without any credentials. As a result, it is not recommended to use this authentication method in a production environment.

The remote server returned a 403 Forbidden error because the server is configured to reject requests that use the ‘Anonymous’ client authentication scheme. This is a security measure to prevent unauthorized access to the resource.

To resolve the issue of the Linked Service trying to log in as 'Anonymous', you can use a Service Principal ID/Key to authenticate to Dynamics CRM or Dataverse. This authentication method is supported and recommended by Microsoft. To use this authentication method, you will need to create a Service Principal in Azure Active Directory and grant it the necessary permissions to access Dynamics CRM or Dataverse.

To add permissions to Dynamics CRM or Dataverse to allow the Linked Service to connect, you will need to grant the Service Principal the appropriate permissions. The specific permissions that you need to grant will depend on the actions that you want to perform in Dynamics CRM or Dataverse.

For example, if you want to read data from Dynamics CRM or Dataverse, you will need to grant the Service Principal read permissions. If you want to write data to Dynamics CRM or Dataverse, you will need to grant the Service Principal write permissions.

Once you have granted the appropriate permissions to the Service Principal, you should be able to connect to Dynamics CRM or Dataverse using the Linked Service without encountering the 'Anonymous' client authentication scheme error.

Reference
https://learn.microsoft.com/en-us/entra/identity-platform/howto-create-service-principal-portal
Kristy Wilhelm 20 Reputation points

2024-04-04T13:07:21.59+00:00

Thanks @Harishga ! I actually figured out my problem late last night..... I needed to add an Application user in my CRM environment in the Power Platform admin center.
Harishga 5,990 Reputation points Microsoft Vendor

2024-04-04T22:08:00.1066667+00:00

@Kristy Wilhelm
Glad to know your issue has been resolved. Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others "I'll repost your solution in case you'd like to accept the answer.

Accepted answer

Harishga 5,990 Reputation points Microsoft Vendor

2024-04-04T22:02:34.4233333+00:00

Hi Kristy Wilhelm
I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to accept the answer .

Issue:
Failing to Login when using a Service Principal ID/Key to either Dynamics CRM or Dataverse Linked Service. How do I get it to not try logging into CRM as 'Anonymous' or how do I add permissions into CRM to allow this to connect?

Solution:
I actually figured out my problem late last night..... I needed to add an Application user in my CRM environment in the Power Platform admin center.

If I missed anything please let me know and I'd be happy to add it to my answer, or feel free to comment below with any additional information.I hope this helps!

If you have any other questions, please let me know. Thank you again for your time and patience throughout this issue.

Please don’t forget to Accept Answer and Yes for "was this answer helpful" wherever the information provided helps you, this can be beneficial to other community members.
Please sign in to rate this answer.

1 person found this answer helpful.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Azure Data Factory Linked Service using Dynamics CRM

0 additional answers

Your answer