DNS Configuration
The implementation of claims based authentication for both internal and external access to a CRM server requires the following URLs:
- Security Token Service(STS) URL, e.g. sts.yourdomain.com
- External URL,e.g. external.yourdomain.com
- Internal URL, e.g. internal.yourdomain.com
- Internet Facing Deployment(IFD) URL, e.g. auth.yourdomain.com
- Discovery Service URL, e.g. dev.yourdomain.com
The Security Token Service URL is the URL of your ADFS server, and the other URLs should all resolve to your CRM server.
Certificate
Claims based authentication is enabled, HTTPS must be used for both internal and external access. As stated above, your CRM server has to bind to various URL. Therefore, you will need a wild card certificate, e.g. *.yourdomain.com
You will also need an encryption certificate to be used by ADFS to encrypt claims.
Demo System
In this guide, we use a demo system with the following settings:
- Domain Name: qadomain.com
- Security Token Service(STS) URL: sts.qadomain.com
- External URL: deepnetcrm.qadomain.com
- Internal URL: crm.qadomain.com
- Internet Facing Deployment(IFD) URL: auth.qadomain.com
- Discovery Service URL: dev.qadomain.com