为Microsoft Dynamics CRM 2011配置Claims-Based认证
- 格式:docx
- 大小:55.69 KB
- 文档页数:16
About the T utorialMicrosoft Dynamics CRM is a customer relationship management software package developed by Microsoft, focusing on enhancing customer relationships for any organization. It is one of the leading industry-standard CRM software available in market.The product focuses mainly on Sales, Marketing, and Customer Service sectors, however Microsoft has been marketing Dynamics CRM as an XRM platform and has been encouraging partners to use its proprietary (.NET based) framework to customize it. AudienceThis tutorial is targeted for Microsoft Dynamics CRM developers beginning to learn Dynamics CRM or developers who are looking for a specific functionality of the product. This tutorial will bring you to the intermediate level of knowledge in Microsoft Dynamics CRM covering all the important aspects with complete hands-on experience. PrerequisitesMicrosoft Dynamics CRM is a product that runs completely on the Microsoft technology stack (, IIS, Microsoft Office, etc.). Hence, basic knowledge of and C# (or ) is needed. Also, this tutorial assumes that you already have Visual Studio software installed on your system.Disclaimer & CopyrightCopyright 2018 by Tutorials Point (I) Pvt. Ltd.All the content and graphics published in this e-book are the property of Tutorials Point (I) Pvt. Ltd. The user of this e-book is prohibited to reuse, retain, copy, distribute or republish any contents or a part of contents of this e-book in any manner without written consent of the publisher.We strive to update the contents of our website and tutorials as timely and as precisely as possible, however, the contents may contain inaccuracies or errors. Tutorials Point (I) Pvt. Ltd. provides no guarantee regarding the accuracy, timeliness or completeness of our website or its contents including this tutorial. If you discover any errors on our websiteorinthistutorial,******************************************.T able of ContentsAbout the Tutorial (i)Audience (i)Prerequisites (i)Disclaimer & Copyright (i)Table of Contents .................................................................................................................................... i i 1.MICROSOFT DYNAMICS C RM ─ OVERVIEW.. (1)Microsoft Dynamics CRM (1)Product Offerings (1)Accessing CRM (2)Product Competitors (3)Product Versions (3)2.MICROSOFT DYNAMICS C RM ─ ENVIRONMENT (4)Setting Up Microsoft Dynamics CRM Online Account (4)Downloading CRM SDK (7)3.MICROSOFT DYNAMICS C RM ─ FUNCTIONAL MODU LES (8)Understanding CRM Functional Modules (8)Navigating CRM Work Areas (9)Sales Module (11)Marketing Module (11)Service Management Module (12)Activity Management (12)4.MICROSOFT DYNAMICS C RM ─ ENTITIES &RECOR DS (14)What is an Entity? (14)Creating a New Entity (14)Creating Records (18)Accessing Records (20)Updating Records (21)Deleting Records (22)5.MICROSOFT DYNAMICS C RM ─ FIELDS (24)Field Types (24)6.MICROSOFT DYNAMICS C RM ─ FORMS (26)Adding Fields on Form (26)7.MICROSOFT DYNAMICS C RM ─ SEARCHING (36)Quick Search (36)Advanced Search (37)Saving Custom View (39)8.MICROSOFT DYNAMICS C RM ─ WEB RESOURCES (40)Uses of Web Resources (40)Types of Web Resources (41)Accessing Web Resources for Any Entity (41)9.MICROSOFT DYNAMICS C RM ─ JSCRIPT WEB RES OURCES (43)Applications of JavaScript in CRM (43)Xrm.Page Object Model (44)Collections (45)Supported Events in Form Programming (45)Form Programming Example (46)10.MICROSOFT DYNAMICS C RM ─ HTML WEB RESOUR CES (57)Applications of HTML Web Resources (57)HTML Web Resource Example (57)11.MICROSOFT DYNAMICS C RM ─ WORKFLOW PROCES SES (65)Synchronous/Asynchronous Workflow (65)Workflow Messages (65)Workflow Scope (66)Workflow Steps (66)Workflow Example (67)Workflow vs Plugin (75)12.MICROSOFT DYNAMICS C RM ─ PLUGINS (77)Event Framework (77)Plugin Pipeline Stages (77)Plugin Messages (78)Writing Plugin (79)Signing the Plugin Assembly (84)Exception Handling in Plugins (86)13.MICROSOFT DYNAMICS C RM ─ PLUGIN REGISTRA TION (87)Connecting to the Server (87)Registering the Assembly (89)Registering the Plugin (92)Testing the Plugin (95)14.MICROSOFT DYNAMICS C RM ─ WEB SERVICES (97)IDiscoveryService Web Service (97)IOrganizationService Web Service (97)IOrganizationService Web Service Methods (98)Web Service Example (98)15.MICROSOFT DYNAMICS C RM ─ SOLUTIONS (105)Types of Solutions (105)Solution Components (106)Creating a Solution (108)Exporting a Solution (109)Importing a Solution (112)Conflict Resolution (114)Customer Relationship M anagement (CRM) is a system for managing a company’s interactions with current and future customers. It often involves using technology to organize, automate, and synchronize sales, marketing, customer service, and technical support. CRM can help reduce costs and increase profitability by organizing and automating business processes that nurture customer satisfaction and loyalty. Microsoft Dynamics CRMMicrosoft Dynamics CRM is a customer relationship management software package developed by Microsoft focused on enhancing the customer relationship for any organization. Out of the box, the product focuses mainly on Sales, Marketing, and Customer Service sectors, though Microsoft has been marketing Dynamics CRM as an XRM platform and has been encouraging partners to use its proprietary (.NET based) framework to customize it. In recent years, it has also grown as an Analytics platform driven by CRM.The CRM Solution can be used to drive the sales productivity and marketing effectiveness for an organization, handle the complete customer support chain, and provide social insights, business intelligence, and a lot of other out-of-the-box functionalities and features. As a product, Microsoft Dynamics CRM also offers full mobile support for using CRM apps on mobiles and tablets.As of writing this tutorial, the latest version of CRM is CRM 2016. However, in this tutorial we will be using CRM 2015 Online version as it is the latest stable version as well as frequently used in many organizations. Nevertheless, even if you are using any other versions of CRM, all the concepts in the tutorial will still hold true.Product OfferingsMicrosoft Dynamics CRM is offered in two categories:CRM OnlineCRM Online is a cloud-based offering of Microsoft Dynamics CRM where all the backend processes (such as application servers, setups, deployments, databases, licensing, etc.) are managed on Microsoft servers. CRM Online is a subscription-based offering which is preferred for organizations who may not want to manage all the technicalities involved in a CRM implementation. You can get started with setting up your system in a few days (not weeks, months or years) and access it on web via your browser.CRM On-PremiseCRM on-premise is a more customized and robust offering of Microsoft Dynamics CRM, where the CRM application and databases will be deployed on your servers. This offering allows you to control all your databases, customizations, deployments, backups, licensing and other network and hardware setups. Generally, organizations who want to go for a customized CRM solution prefer on-premise deployment as it offers better integration and customization capabilities.From the functional standpoint, both the offerings offer similar functionalities; however, they differ significantly in terms of implementation. The differences are summarized in the following table.Accessing CRMMicrosoft Dynamics CRM can be accessed via any of the following options: ∙Browser∙Mobile and Tablets∙OutlookProduct CompetitorsMicrosoft Dynamics CRM is undoubtedly one of the top products in the CRM space. However, following are the other products that compete with Microsoft Dynamics CRM.∙∙Oracle∙SAP∙Sage CRM∙Sugar CRM∙NetSuiteProduct V ersionsMicrosoft Dynamics CRM has grown over the years starting from its 1.0 version in 2003. The latest version (as of writing this article) is 2015. Following is the chronological list of release versions:∙Microsoft CRM 1.0∙Microsoft CRM 1.2∙Microsoft Dynamics CRM 3.0∙Microsoft Dynamics CRM 4.0∙Microsoft Dynamics CRM 2011∙Microsoft Dynamics CRM 2013∙Microsoft Dynamics CRM 2015∙Microsoft Dynamics CRM 2016Let's start by setting up our CRM environment. We will be using the online version of CRM 2015, since the online version provides one-month free trial access. By doing this, you will not need to purchase any license to learn CRM.Note: Since Microsoft Dynamics CRM is a growing product, it is possible that by the time you are learning this, you will have a newer version of the product. In that case, the application may not look exactly as you would see in the screenshots of this tutorial. However, the core concepts of the product remain the same. The look-and-feel and the navigation of the product may change, however, in most of the cases you will be able to easily navigate and locate the required options.Setting Up Microsoft Dynamics CRM Online AccountStep 1: Navigate to the following URL:https:///en-us/dynamics/crm-free-trial-overview.aspxIn case you do not see the options of Trial version via this link in future, just try searching "Microsoft Dynamics CRM Free Trial" on Google.Step 2:Click the Try it free button. This will start a 3-step registration process as shown in the following screenshot. In Step 1 of 3-step registration, fill in the mandatory details such as name, email, and language.Step 3: In Step 2 of 3-step registration, create a user ID of your choice and set a password for your account.Step 4:In Step 3 of 3-step registration, Microsoft will validate the mobile number that you have specified. For this, you can provide your mobile number and click Text me. It will then send an OTP to your mobile using which you will be able to proceed further with the setup.Step 5:Your Office 365 user ID will be created. You can save this user ID information for later access.After setting up the account, it will now open your CRM Dashboard which will look something like the following.Just to emphasize again, the screenshots above may change with a future version, however setting up the environment will be a pretty simple process.Downloading CRM SDKThe Software Development Kit (SDK) of Microsoft Dynamics CRM contains important code samples including server side code, client side code, extensions, plugins, web services, workflows, security model, etc. Basically, the SDK contains every development resource that you would need to get started with CRM. Whether you are planning to set up a new plugin project or setting up a web services project for CRM, the SDK provides the basic architecture and examples ranging from simple to advanced level to help you kick-off. We will now look at the steps to download and install the SDK.Step 1:Every version of Microsoft Dynamics CRM comes with its own SDK version. The best way to get the correct SDK version would be to search on Google for your respective CRM version. For example, if your CRM version is 2015, then try searching for "Microsoft Dynamics CRM 2015 SDK".Step 2:Once downloaded, run the exe setup. Click Continue.Step 3:It will ask you to choose the location where the SDK should be extracted. Select any appropriate location where you would like to keep the reference SDK.Step 4: Open the folder where you had extracted. You can access all the SDK content from here.ConclusionIn this chapter, we have set up our environment by creating a CRM Online account. We then downloaded the CRM SDK, which will be used in the subsequent chapters of this tutorial. Make sure to note down the credentials with which you have set up the account, since you will need these credentials the next time you login.The entire Microsoft Dynamics CRM is designed around the following functional modules.∙Sales∙Marketing∙Service ManagementThese functional modules are often called as Work Areas.Understanding CRM Functional ModulesThe entire CRM application is divided functionally for different types of users and teams. Hence, if an organization is using CRM to manage its processes, the users from the Sales team would use the functionalities that come under the Sales module, while the users from the Marketing team would use functionalities that fall under the Marketing module. All these three functional modules come together to drive the entire lifecycle of gaining a new customer (Marketing), selling them the services (Sales) and maintaining the existing customers (Service Management).To understand this flow in a better way, consider a bank which sells credit cards to its customers. The typical lifecycle of selling a credit card to a customer would be as follows. In each step of this lifecycle, you will see how the Sales, Marketing and Service modules perform their role.Sales & Marketing:The bank’s call center office executive receives data of potential customers; often called as Leads in CRM. These Leads are captured in the CRM system via marketing campaigns, sales drives, referrals, etc.Sales: The call center executive communicates with these Leads either through phone calls/emails/etc. If the customer is interested in the credit card offering, the Lead record will be converted to an Opportunity record (won Lead).Service: Once a customer becomes a part of the system, the company would assist him/her with payments, billing, refunds, etc. Whenever the customer has any queries or concerns, they will make a call to the call center and raise incidents. The executive will followup to resolve the case with the aim to provide quality service to the customer. These tasks fall under CRM Service Management.Navigating CRM Work AreasStep 1: Open CRM Home Page.Step 2: By default, you will see the Sales work area as selected.Step 3: To change the work area, click the Show work areas option. You will see the options for selecting Sales, Service, and Marketing.Step 4: Click Sales. This will show you all the entities which fall under Sales such as Accounts, Contacts, Leads, Opportunities, Competitors, etc. Each of these entities are categorized by their business process such as My Work, Customers, Sales, Collateral, etc.Step 5: Similarly, if you click the Marketing work area, you will see all the entities related to Marketing business functionalities.Sales ModuleThe Sales module of CRM is designed to drive the entire sales lifecycle of a new customer. The Sales module consists of the following sub-modules:Leads: Represents a person or an organization that can be a potential customer to the company in future. This is the first step towards getting a potential customer in the system.Opportunities: Represents a potential sale to the customer. Once a Lead shows interest in the offering, it gets converted to an Opportunity. An Opportunity will either be won or lost.Accounts: Represents a company with which the organization has relations. Once an Opportunity wins, it gets converted to either an Account or Contacts.Contacts: Represents a person, or any individual with whom the organization has relations. Mostly these Contacts are the customers of the organizations (e.g. all credit card customers of a bank). Once an Opportunity wins, it gets converted to either an Account or Contacts.Competitors: Manages all the market competitors of the organization.Products: Manages all the products offered by the organization to its customers (Example, all the credit card plans).Quotes: A formal offer for products or services proposed at specific prices sent to a prospective customer (Example, yearly pricing of a certain credit card plan sent to the customer).Orders: A quote that gets accepted by the customer turns into an Order (Example, out of all the plans that the organization offers you, you may go for a 6-month subscription). Invoices: A billed order generates an invoice.Marketing ModuleThe Marketing module of CRM is designed to drive the entire marketing process of an organization for its existing and potential customers. The Marketing module consists of the following sub-modules:Marketing Lists: Provides a way to group your Contacts, Accounts, and Leads and interact with them via sending promotional emails, event details, newsletters and other updates relevant to the target customers. You can define the criteria to create your marketing lists (Example, contacts aged between 25 and 35).Campaigns: Campaigns are designed to measure the effectiveness and accomplish a specific result, such as introducing a new product or increasing the market share and may include various communication channels such as email, newspaper ads, YouTube ads, etc.Quick Campaigns: A Quick Campaign is similar to Campaign however it can be related to only one type of activity.All the above Marketing modules work in close co-ordination with the Sales module.Service Management ModuleThe Service Management module of CRM is designed to focus, manage, and track the customer service operations of an organization such as supporting the incident-based services, supporting the customers using service scheduling, etc.The Service Management module covers the following sub-modules:∙Cases (Incidents): Supports any customer requests, issues, or complaints to be tracked via incidents/cases. A case follows various stages of an issue resolution process and then finally gets resolved and is closed.∙Knowledge Base: Maintains a master repository for all the common questions and answers that the customer frequently asks.∙Contracts: Contracts work with Cases indicating all the active contracts that the customer has.∙Resources/Resource Groups: Represents the people, tools, rooms, or pieces of equipment that are used to deliver a service. These resources can be used to solve a specific customer issue.∙Services: Represents all the services that the organization offers to the customers.∙Service Calendar: Used to schedule work timings and schedules of the users who work in the organization.Activity ManagementAll the modules explained above use the Activity Management module of CRM. An Activity represents any kind of interaction with the customer such as a Phone Call, Email, Letter, etc. These activities can be related to any of the entities explained earlier such as Account, Contact, Lead, Case, etc. By default, CRM provides following types of activities out-of-the-box:∙Phone Call∙Email∙Task∙Appointment∙Recurring Appointment∙Letter∙Fax∙Campaign Response∙Campaign Activities∙Service Activity∙Custom ActivitiesConclusionIn this chapter, we have learnt about the three major modules of CRM –Sales, Marketing, and Service Management. We understood how the work areas are organized in CRM and how the entire lifecycle of a CRM organization works. We also looked at the Activity Management module of CRM which allows to create Phone, Email, Fax and other types of customer interaction activities.End of ebook previewIf you liked what you saw…Buy it from our store @ https://。
汉得信息技术有限公司(CRM客户关系)微软DCRM自定义实体配置DynamicsCRM自定义实体配置作者:HAND创建日期:2013-01-06最后更新:2013-01-06控制码:版本:1.0审批签字:客户项目负责人CopyNumber_____文档控制修改记录审阅分发目录新建自定义实体6创建或编辑实体字段9编辑实体的主窗体13创建或编辑实体的公共视图16添加或编辑字段和表单的事件脚本18添加或编辑表单Web资源18为表单事件添加事件处理程序18为字段事件添加事件处理程序19未解决的问题21新建自定义实体1.在导航窗格中,单击“设置”。
2.在“自定义”下,单击“自定义项”。
3.在“自定义”区域中,单击“自定义系统”。
4.单击“实体”。
在“操作”工具栏上,单击“新建”按钮。
5.定义将在MicrosoftDynamicsCRM中用于此实体的“显示名称”和“复数名称”。
6.在“所有权”列表中,选择其中一项:•用户或团队此实体的记录可以由个人用户或团队负责。
可以根据当前负责人所关联的业务部门来定义安全性。
例如,联系人记录设置为“用户或团队”。
•组织此实体的记录用于供所有MicrosoftDynamicsCRM用户引用。
个人用户或团队无法负责这些记录。
例如,产品记录设置为“组织”。
7.在“名称”框中,查看MicrosoftDynamicsCRM将用于此实体的名称。
默认输入内容是使用您在“显示名称”中输入的内容创建的。
您可以在保存实体之前修改该名称。
8.在“显示此实体的区域”区域中,选择希望在MicrosoftDynamicsCRM用户界面中显示实体的导航窗格区域。
所有新实体都显示在“高级查找”中。
9.在“实体选项”区域中,可以选择下表中列出的选项。
(带有箭头的选项一经启用后不能禁用,所以开始自定义实体时可以先不启用,待需要时再启用)10.单击“主字段”选项卡。
主字段在创建或显示与此实体的关系时显示,例如在“查找记录”对话框中显示。
Connectivity and Firewall Port Requirements for Microsoft Dynamics CRM 2011White PaperPublished : October 2012 Updated : September 2013FeedbackTo send comments or suggestions about this document, please click the following link and type your feedback in the message body:/fwlink/?LinkID=267480Important: The subject-line information is used to route your feedback. If you remove or modify the subject line, we may be unable to process your feedback.2Table of ContentsOverview (4)On Premise with Integrated Windows Authentication (4)On Premise with Claims-Based Authentication (5)Default CRM Connectivity Requirements (6)Port Recommendations (8)Network ports for the Microsoft Dynamics CRM Web application (8)Network ports for the Asynchronous Service, Web Application Server, and Sandbox Processing Service server roles (9)Network ports that are used by the SQL Server that runs the Microsoft Dynamics CRM Reporting Extensions server roles (9)Connectivity Requirements for Windows Services (9)Connectivity Requirements for Integrated Windows Authentication (10)Mail Server Connectivity Requirements (11)Appendix A: Resources (12)3OverviewMany data centers include firewalls between the end users and the servers and other integrated systems that support an implementation of Microsoft Dynamics CRM 2011. This document is designed to provide guidance on the connectivity requirements between Microsoft Dynamics CRM 2011 and other systems to assist readers with proper firewall configuration in customer environments.On-Premises with Integrated Windows AuthenticationAn overview of an on-premises implementation that uses Integrated Windows Authentication (IWA) is shown in the following diagram.In this scenario the user must have a certain level of connectivity to the CRM Server(s), the Active Directory Server(s) and the SQL Server for SQL Filtered View access (if Export to Excel functionality is required). The remainder of this document focuses primarily on this scenario and details the required level of connectivity between these various components as well as further options for integration, Citrix implication, and so on.4On-Premises with Claims-Based AuthenticationAn overview of an on-premises implementation that uses claims-based authentication is shown in the following diagram using Active Directory Federation Service (ADFS) as the Security Token Service (STS).With claims-based authentication, the Microsoft Dynamics CRM site is accessed anonymously and is then redirected to ADFS. Users enter their credentials, which are validated by ADFS by contacting Active Directory Directory Services (AD-DS). Finally, AFDS issues a SAML token containing the necessary claims for accessing Microsoft Dynamics CRM.5Default CRM Connectivity RequirementsAn overview of the default connectivity requirements for an on-premises deployment ofIn addition all Servers require the following:∙ DNS name resolution on UDP/TCP: 53∙ NetBIOS name resolution on TCP: 139, UDP: 137/138∙ NTP time synchronisation: 123 –this is a requirement for Kerberos Authentication∙ DCOM and RPC: TCP 135, UDP 1025Note. Arrow direction depicts source and target of initiating request rather than direction of data flowImportant: Because this diagram is focused on Microsoft Dynamics CRM connectivity requirements, full details about the specific port requirements for Microsoft Exchange Server and the Microsoft Windows Active Directory service are not shown. Additional information and links to related articles about these technologies and their specific requirements are provided in the following sections of this document.6The default connectivity requirements for components of an on-premises deployment of Microsoft Dynamics CRM 2011 are shown in the following table.Important: In each case, the port numbers can be configured to run under alternative (non-default) values, so environments will vary.7Port RecommendationsNetwork ports for the Microsoft Dynamics CRM web application The following table lists the ports used for a server that is running a Full Server installation of Microsoft Dynamics CRM. Moreover, except for the Microsoft SQL Server role, and the Microsoft Dynamics CRM Connector for SQL Server Reporting Services server role, all server roles are installed on the same computer.Important: Depending on the domain trust configuration, additional network ports may be required for Microsoft Dynamics CRM to work correctly. For more detail, see Knowledge Base article ID 179442, How to configure a firewall for domains and trusts.8Network ports for the Asynchronous Service, Web Application Server, and Sandbox Processing Service server rolesThe following table lists the additional ports that are used for a deployment where the Sandbox Processing Service is running on a separate computer.Network ports that are used by the SQL Server that runs the Microsoft Dynamics CRM Reporting Extensions server rolesThe following table lists the ports that are used for a computer that is running SQL Server with only SQL Server and the Microsoft Dynamics CRM Reporting Extensions server roles installed.Note: The NETBIOS ports (TCP 139, UDP 137 and 138) are an alternative to port 445 which is used by SQL named pipes. These ports are required only during setup to determine the SQL port for named instances of SQL; the NETBIOS ports are not required during normal operation. Connectivity Requirements for Windows ServicesMicrosoft client, server, and server-based programs use a variety of network ports and protocols to communicate with client systems and with other server systems over the network. While beyond the scope of this article, details of the essential network ports, protocols and services that are used by Microsoft client and server operating systems, server-based programs, and their subcomponents in the Microsoft Windows server system are available on the Microsoft Support site in Article ID 832017, Service overview and network port requirements for Windows.9Connectivity Requirements for Integrated Windows AuthenticationThe key service and port requirements for Integrated Windows Authentication (IWA) are shown in the following table:However, in larger deployments, firewalls can present two challenges when deploying a distributed Active Directory (AD) directory service architecture:▪Initially promoting a server to a domain controller▪Replicating traffic between domain controllersActive Directory relies on remote procedure call (RPC) for replication between domain controllers. Note that while Simple Mail Transfer Protocol [SMTP] can be used in certain situations—schema, configuration, and global catalog replication—but not domain naming context, which limits its usefulness.Configuring replication in environments in which a directory forest is distributed among internal, perimeter networks and external (that is, Internet-facing) networks can be challenging. In these scenarios, there are three possible approaches:▪Open the firewall wide to permit the native dynamic behaviour of RPC▪Limit the use of TCP ports by RPC and open the firewall just a little bitNote: For additional detail about this option, see the following resources:∙Article ID 929851 - The default dynamic port range for TCP/IP has changed in Windows Vista and in Windows Server 2008∙Article ID 154596 - How to configure RPC dynamic port allocation to work with firewalls∙How to limit dynamic RPC ports used by DPM and protected servers▪Encapsulate domain controller (DC-to-DC) traffic inside IP Security Protocol (IPSec) and open the firewall for thatEach of these approaches has its pros and cons; in general, there are more cons than pros associated with the first option listed above and more pros than cons associated with the third option listed above.Note: For more information about each option, including details of the configuration and port requirements for each, see the TechNet article Active Directory Replication Over Firewalls.10Mail Server Connectivity RequirementsMicrosoft Dynamics CRM 2011 provides for integration with Exchange and other SMTP/POP3 servers. Mail system integration is typically achieved either through client-side integration via Outlook or server-side integration via Exchange or a third-party POP3/SMTP server.Note: This document focuses on server-side integration via Exchange, but the same principles would apply to server-side integration via other POP3/SMTP servers.Administrators can specify to use either client-side or server-side integration, which can be configured at a user level within the User properties in Microsoft Dynamics CRM. After the administrator specifies the level at which integration will occur, users on the client computers must agree to have email sent on their behalf by Microsoft Dynamics CRM by using their own user options configuration.While client-side integration does not require any additional server components, it works only with Microsoft Dynamics CRM for Outlook. The Microsoft Dynamics CRM for Outlook plug-in is then used to send email via Outlook and the users’ preconfigured mail Server as well as to route inbound emails back into Microsoft Dynamics CRM. This integration happens on a regular polling basis (but is not immediate). Additional Microsoft Dynamics CRM-specific ports are not required for this integration; standard Exchange connectivity is used. Emails are routed into Microsoft Dynamics CRM via the CRM Web Services; hence access to Port 80 (443 for SSL) from Microsoft Dynamics CRM for Outlook is the only requirement.The CRM Exchange Router can be installed on an Exchange Server or on a dedicated CRM Exchange Router server. Using the CRM Exchange Router provides inbound and outbound email connectivity for both the Microsoft Dynamics CRM web client and Microsoft Dynamics CRM for Outlook. This CRM Exchange Router integrates with external mail systems via:▪POP3 (TCP:110) and SMTP (TCP:25)▪HTTP-DAV (TCP:80) for the CRM Sink account or direct to users mail account▪Exchange Web Service (EWS) (TCP:80)11Appendix A: ResourcesFor additional information related to connectivity and firewall port requirements in Microsoft Dynamics CRM 2011, see the following additional resources:▪Microsoft Dynamics CRM 2011 Implementation Guideo Downloado View Online▪Service overview and network port requirements for Windows▪Article ID 929851 - The default dynamic port range for TCP/IP has changed in Windows Vista and in Windows Server 2008▪Article ID 154596 - How to configure RPC dynamic port allocation to work with firewalls ▪How to limit dynamic RPC ports used by DPM and protected servers▪Active Directory Replication Over Firewalls▪Securing Your Application Server12。
MicrosoftDynamicsCRM操作与维护指导书Microsoft Dynamics CRM 4.0操作与保护指南中文 4.0.0 修订版本文档中的信息(包含引用的 URL 与其他 Internet 网站)如有更换,恕不另行通知。
除非另行说明,否则本文示例中描述的公司、组织、产品、域名、电子邮件地址、徽标、人物、地点与事件纯属虚构。
无意与任何真实的公司、组织、产品、域名、电子邮件地址、徽标、人物、地点或者事件发生任何关联,也不应有此方面的推断。
用户有责任遵守一切适用的版权法。
未经Microsoft Corporation 书面明确许可,不得出于任何目的、以任何形式或者通过任何手段(电子、机械、影印、录制或者其他手段)复制本文档的任何内容、将其存入或者引入检索系统或者者进行传播;但此规定并不限制版权所给予的各项权利。
Microsoft 可能拥有涉及本文档主题的专利、专利申请、商标、版权或者其他知识产权。
除非Microsoft 提供的书面许可协议中有明文规定,否则提供本文档并不表示给予您使用这些专利、商标、版权或者其他知识产权的许可。
© 2007 Microsoft Corporation。
保留所有权利。
您复制本文档的权利受版权法/著作权法与软件许可协议条款的限制。
关于软件许可证,您能够制作合理数量的副本或者打印版本供自己使用。
未经授权擅自制作副本、改编、汇编或者进行衍生性工作用于商业发行都是法律禁止的行为,违者将受到惩处。
Microsoft、MS-DOS、Windows、Windows Server、Windows Vista、Microsoft Dynamics、Active Directory、BizTalk 与 Outlook 是 Microsoft 旗下各公司的商标。
所有其他商标均归其各自所有者所有。
目录1概述欢迎使用《Microsoft Dynamics CRM 4.0 操作与保护指南》,本指南是《Microsoft Dynamics CRM 4.0 实施指南》综合文档集的一部分。
MS dynamics CRM 2011安装部署和使用之八:声明认证的内部访问(2012-04-17 00:18:22)转载▼分类:DynamicsCRM标签:crmdynamicscrm2011客户关系管理感知网it配置基于声明的认证--内部访问这里需要如下4个步骤:1)安装和配置AD FS 2.02)在CRM 2011上设定基于声明的认证3)在AD FS 2.0上设定基于声明的认证4)测试基于声明的认证方式本文参考了:/blog/index.php/server-tips/microsoft-crm-2011-how-to-configure -ifd-hosted-setup/安装和配置AD FS 2.0在内网的访问的流程如下,参见之前的介绍在这里AD FS 2.0负责向客户端发送token。
需要注意的是,AD FS 2.0默认必须安装到Default Web Site,CRM 2011安装在另外的站点,如下图。
如果不是这样,那你就要重新安装CRM 2011了。
下载AD FS 2.0 RTW/downloads/zh-cn/details.aspx?familyid=118c3588-9070-426a-b655-6c ec0a92c10b安装 AD FS 2.0在安装向导,选择“联合服务器”,确认安装完成。
完成时,勾选“启动AD FS 2.0管理单元”配置 AD FS 2.0AD FS 2.0管理界面,选择配置向导,选择“创建新的联合身份验证服务”,下一步选择”独立联合服务器“联合身份验证服务名称,输入。
说明:对于多个服务器的,可以设定为”"选择下一步直至完成安装验证AD FS 2.0工作打开IE, 输入联合元数据的URL地址https:///federationmetadata/2007-06/federationmetadata.xml说明:1)之外,其它URL部分是固定的2)对多个服务器的情况,这里的地址是对于弹出的警告,确认继续,此时IE会打开XML文件,表示AD FS 2.0工作正常在CRM 2011上配置基于声明的认证打开CRM部署管理器(开始--部署管理器)选择Dynamics CRM,右键,选择“属性”选择WEB地址,绑定类型,选择HTTPS,现在设置的地址是给内网访问的,我们设定一个域名“",端口是刚才设定CRM的SSL端口,446.确认。
Microsoft Dynamics CRM 2011 规划指南5.0.0版权本文档按“原样”提供。
本文档中的信息和观点(包括URL 和其他Internet 网站引用)如有更改,恕不另行通知。
使用本文档时的风险自负。
引用的示例都是虚构的,仅用于提供解释说明。
不可理解为与任何现实情况的关联。
本文档不向您提供对任何Microsoft 产品中的任何知识产权的任何法律权利。
您只能出于内部参考目的复制和使用本文档。
© 2011 Microsoft Corporation。
保留所有权利。
Microsoft、Active Directory、Excel、Hyper-V、Internet Explorer、Microsoft Dynamics、Microsoft Dynamics 徽标、MSDN、Outlook、记事本、SharePoint、Silverlight、Visual C++、Windows、Windows Azure、Windows Live、Windows PowerShell、Windows Server 和Windows Vista 是Microsoft 旗下各公司的商标。
所有其他商标均归其各自所有者所有。
目录版权 (2)概述 (5)规划Microsoft Dynamics CRM (5)Microsoft Dynamics CRM 版本和许可 (6)Microsoft Dynamics CRM 2011 中的新增功能 (6)新应用程序功能 (6)基于声明的身份验证支持 (8)Add or remove a server role (8)沙盒处理服务 (8)Microsoft Dynamics CRM 2011 电子邮件路由器中的新增功能 (8)Microsoft Dynamics CRM for Outlook 中的新增功能 (8)业务经理在Microsoft Dynamics CRM 实施中所发挥的作用 (11)帮助您规划的工具、培训和文档 (11)业务管理工具 (12)Microsoft Dynamics Sure Step 方法 (12)业务管理培训 (12)帮助 (12)规划Microsoft Dynamics CRM 实施 (13)业务经理的规划任务 (13)业务经理的开发任务 (14)业务经理的部署任务 (14)业务经理的部署后任务 (14)管理Microsoft Dynamics CRM 实施项目 (14)实施概述 (16)规划 (16)开发 (17)部署 (17)部署后:操作和维护 (17)规划任务 (17)部署任务 (24)部署后任务 (24)系统要求和必备组件 (27)Microsoft Dynamics CRM 服务器2011 硬件要求 (28)Microsoft Dynamics CRM 2011 规划指南iMicrosoft SQL Server 硬件要求 (28)Microsoft Dynamics CRM 服务器2011软件要求 (28)Windows Server 操作系统 (29)支持的Windows Server 2008 版本 (29)服务器虚拟化 (29)Active Directory 模式 (29)Internet Information Services (IIS) (30)SQL Server 版本 (30)基于声明的身份验证和IFD 要求 (31)SQL Server Reporting Services (32)必备软件组件 (32)验证必备组件 (33)Microsoft Dynamics CRM 报表扩展 (34)Microsoft Dynamics CRM 报表扩展常规要求 (34)SharePoint 文档管理软件要求 (34)Office Communications Server 集成 (35)Microsoft Dynamics CRM 电子邮件路由器硬件要求 (35)Microsoft Dynamics CRM 电子邮件路由器软件要求 (35)Exchange Server (36)消息处理和传输协议 (37)Exchange Online (37)Microsoft Dynamics CRM for Outlook 硬件要求 (37)Microsoft Dynamics CRM for Outlook 软件要求 (38)Microsoft Dynamics CRM for Outlook 必备软件组件 (38)Microsoft Dynamics CRM Web 客户端软件要求 (39)支持的64 位配置 (40)语言支持 (40)要求 (40)示例 (41)货币支持 (42)规划部署 (49)规划部署的先决条件和注意事项 (49)硬件要求 (50)软件要求 (50)Active Directory 注意事项 (50)SQL Server 安装和配置 (52)Microsoft SQL Server Reporting Services 的规划要求 (58)规划电子邮件集成 (59)有关操作系统和软件组件安全的注意事项 (59)ii Microsoft Dynamics CRM 2011 规划指南保护Windows Server (59)保护SQL Server (60)保护Exchange Server 和Outlook (61)Microsoft Dynamics CRM 的安全注意事项 (62)Microsoft Dynamics CRM 安装程序、服务和组件所需的最低权限 (62)Microsoft Dynamics CRM 安装文件 (64)最佳Microsoft Dynamics CRM 安全做法 (65)Microsoft Dynamics CRM 管理最佳方案 (65)Microsoft Dynamics CRM 安全模型 (66)Microsoft Dynamics CRM 的网络端口 (67)已知风险和漏洞 (69)Supported configurations (70)Active Directory 要求 (70)单服务器部署 (71)多服务器部署 (71)支持多服务器拓扑 (75)从Microsoft Dynamics CRM 4.0 升级 (78)不支持就地升级的Microsoft Dynamics CRM 软件和组件 (79)升级产品密钥 (80)用户权限 (80)同一域中的多个Microsoft Dynamics CRM 服务器2011 版本 (80)共享SQL Server (80)成功升级提示 (81)升级Microsoft Dynamics CRM for Outlook (81)升级问题和注意事项 (83)规划部署高级主题 (85)Advanced deployment options for Microsoft Dynamics CRM 服务器2011 (85)使用本地程序包更新安装程序文件 (85)添加或删除服务器角色 (85)将Microsoft Dynamics CRM 配置为面向Internet 的部署 (86)Microsoft Dynamics CRM 中的密钥管理 (88)多组织部署 (89)Microsoft Dynamics CRM for Outlook 的高级部署选项 (89)Microsoft Dynamics CRM 2011 规划指南iiiChapter 1概述本指南是《Microsoft Dynamics CRM 实施指南》的一部分,它包括以下三个文档:∙规划指南:使用本指南可以确定必须为Microsoft Dynamics CRM 规划哪些内容。
标签:分类: DynamicsCRM sql2008dynamicscrm2011感知网客户关系管理说明:选择光盘中的setup.exe,安装过程中,如果提示错误:并非所有被引用的特权或组都分配给呼叫方。
无论重试或取消都无法退岀请选择,setup.exe,右键--以管理员身份运行1 )运行安装程序,选择安装”- >'全新SQL Server 独立安装或向现有安装添加功能”如下图所示。
WC]tf2)安装程序向导经过系统检测” 产品密钥”、许可条款”三个页面,进入安装程序支持文件”页面,点击安装”进行支持文件的安装过程。
序列号:请向微软购买。
IS^SQt- Se ™rZftOfl E2 SSSS安装程序支持文件单击“妄装”以安装宣装理陣吏持文件。
若要宣装或壷新SQL騒艸并2008 R2,这些交件昱必霁的*衣品密翩许可条隸妄裝稈序支倉文件1功能名称状态妄裝程摩壹持文件SQL灵皿安装程帛霧要下列组件(门.^SqL 畀”“ 2 DOB3 )支持文件安装完后, 进入 规则检查”页面,安装程序会给出几个警告,包括计算机域控制器”防火墙”。
安裝觀序支持规則曳厦观障雯押顾冋誓皋羟莫SfSL Servr 竟荚理隼隶舟文俘时司託烁生的同盘"也质更正皈稱刻A 去報里匡惟曲存里鶴邑 砂能送择魔妥空Itt-wrr 擋渓报吿 K 圭丙;贯镂71|赛義避贋 冗居B )Windows 防火墙只是提示打开防火墙端口。
后面处理点击下一步”,选择“ SQL Server 功能安装甘曲对SUL S?r^r ;主卅襄【飴勺一抉性短匹<计)t 机博时JS ______________曲Hlcrirsirft .HET 盅用1?斥芟全性..Yinl!山M E 蘭火J 間Ld 。
9叨门乩口仞竹+^ri/Li/1勺处归53 c.A )计算机域控制器建议不要将 SQL Server 2008安装在域控制器上。
我们安装1台服务器上,忽略4)在功能选择”页面,勾选 数据库引擎服务”、全文检索”、“ Reporting Service 、”“ Busi ness In tellige nee Developme nt Studio 、管理工具一基本”、管理工具一完整”这几个功能。
为Microsoft Dynamics CRM 2011配置Claims-Based认证Microsoft Dynamics CRM 4.0 使用Windows集成认证(Integrated Windows authentication)来对内部用户进行认证,使用窗体身份认证(Forms authentication)来对不使用VPN的外部用户提供internet访问。
Microsoft Dynamics CRM 2011 将窗体身份认证替换为了基于声明的认证(Claim-based authentication),它能够提供简化的的用户访问和单点登录(single sign-on)来访问Microsoft Dynamics CRM的数据。
本文将介绍如何为CRM 2011配置Claim-based认证以及IFD。
关于ADFS和Claim,可参考下述资料:A Guide to Claims–based Identity and Access Control(/fwlink/?LinkID=188049)Using Active Directory Federation Services 2.0 in Identity Solutions (/fwlink/?LinkID=209776)Windows Server 2008 R2 Active Directory Federation Services 2.0 (/fwlink/?LinkId=200771)AD FS 2.0 Step-by-Step and How To Guides(/fwlink/?LinkId=180357)Claims-Based Identity for Windows.pdf(/fwlink/?LinkID=209773)本文的内容将包括以下三部分:1. Claim-based认证的准备工作2. 配置Claim-based认证-内部访问3. 配置Claim-based认证-外部访问(IFD)1. Claim-based认证的准备工作在配置配置Claim-based认证之前,需要考虑以下问题:(1)CRM Server 2011和AD FS 2.0的条件如果你打算将组建装在同一个服务器上,那么你需要注意AD FS 2.0会安装在默认站点上。
因此,在安装CRM 2011时需要将其安装在一个新的站点上。
在配置Claim-based认证之前,必须配置CRM 2011站点使用Secure Sockets Layer(SSL)。
因为,CRM安装程序默认不会将站点配置成SSL。
CRM 2011的站点必须是具有单一绑定(single binding)。
多个IIS绑定,例如两个HTTPS或两个HTTP,是CRM 2011不支持的。
但可以有一个HTTP绑定,一个HTTPS绑定。
配置Claim-based认证之后,在浏览器上必须使用HTTPS来访问CRM 2011的内部和外部地址。
(2)证书的选择和要求在使用Claim-based认证时,证书在客户端和CRM服务器之间的安全通信中扮演了重要的角色。
你需要在配置Claim-based认证之前对数字证书有一个深入的理解。
下面的文档介绍了证书以及Public Key infrastructure(PKI)· Application Security - Certificates(/fwlink/?LinkId=200774)· Certificate Requirements for Federation Servers(/fwlink/?LinkId=182466)在MS CRM 2011的Claim-based认证时,以下场景需要证书:Claims加密:Claim-based认证需要identities提供一个加密的证书来认证。
这个证书必须被信任的认证机构(CA)签名。
SSL(HTTPS)加密:为SSL加密的证书必须对类似这些的主机名有效,例如, , 和 . 为了满足这些需求,你可以使用一个通配符(wildcard)证书(*),或者一个支持Subject Alternative Name的证书,或为每个名称创建单独的证书。
最后一种方法仅仅适用于你为每个web server角色使用不同的服务器。
多个IIS绑定,例如一个站点有两个HTTPS绑定或两个HTTP绑定,这对于CRM 2011是不支持的。
在你选择证书时,下述证书可作为参考:通配符证书(wildcard certificate,推荐):一个通配符证书满足单个域(domain)里内部和外部访问的需求。
例如,*证书支持外部访问(和)和内部访问()。
因为外部的域名()需要为内部访问来解析,因此你不能使用服务器名称来作为内部访问。
如果你希望这样,你需要使用不同的CRM 2011服务器来提供内部和外部的Claims访问,从而允许使用服务器名称来作为内部访问。
Subject Alternative Name(SAN)证书:如果你希望使用与外部访问地址不同的地址来进行内部访问,那么你可以使用SAN证书。
例如:你内部域名为org.contoso.local,外部域名为。
不过请注意,第三方证书供应商一般不为.local域名提供证书。
自签名证书(Self-signed certificate):推荐自签名证书仅仅在测试时使用。
如果你使用自签名证书,它必须导入所有CRM 2011服务器以及所有访问CRM 2011的客户端上的Trusted Root Certification Authorities store。
申请证书在这里,我将以通配符证书为例,介绍如何创建证书:1) 打开IIS管理器2) 点击服务器名称,在主界面双击Server Certificates(服务器证书)3) 在右侧面板中点击Create Certificate Request…4) 按照下图填写每一栏,点击Next注意:通用名称必须包含.com,如果是rxing,则后面adfs配置无法通过。
5) Cryptographic Service Provider Properties页保持默认值,点击Next。
6) 在File Name页面,输入C:\req.txt,然后点击Finish。
7) Run cmd,运行certreq -submit -attrib "CertificateTemplate: WebServer" C:\req.txt 出现错误的话要安装证书服务(在服务器管理-角色-增加中)8) 选择CA,点击OK.9) 将证书存储为C:\Wildcard.cer。
(9-11也可以在CA中完成)10) 回到IIS管理器,点击图一中的Complete Certificate Request…11) 选择C:\Wildcard.cer,Friendly name取名为 *,当然,你也可以取其他名称。
12) 点击OK。
13) 这样我们就完成了通配符证书的请求。
为默认站点绑定SSL证书1) 打开IIS管理器。
2) 在Connections面板,展开Sites,点击Default Web Site。
3) 在Actions面板,点击Bindings。
4) 在Site Bindings对话框,点击Add。
5) Type选择https。
6) SSL certificate,选择刚才创建的证书 *,然后点击OK。
7) 点击Close。
为CRM 2011站点绑定SSL证书1) 打开IIS管理器。
2) 在Connections面板,展开Sites,点击Default Web Site。
3) 在Actions面板,点击Bindings。
4) 在Site Bindings对话框,点击Add。
5) Type选择https。
6) SSL certificate,选择刚才创建的证书 *。
7) Port选择一个不同于443(例如444)的端口号,然后点击OK8) 点击Close。
(3)DNS配置在为MS CRM 2011配置Claims-based认证之前,你需要在DNS中添加一些记录,来让CRM 2011的各个断点可以被正确解析。
如果你是在配置测试环境,那么你可以在hosts.ini文件里配置这些记录,但在生产环境中我们不推荐使用hosts.ini文件。
在DNS中为外部访问地址(例如:)添加一个正向查找区域(forward lookup zone)点击Start=>Administrative Tools=>DNS,打开DNS管理器。
在树形结构中点击DNS服务器,然后点击New Zone来启动向导。
在正向查找区域创建完毕后,为下列域名创建DNS记录:· AD FS 2.0服务器(例如: )· 外部 IFD访问地址 - Microsoft Dynamics CRM IFD federation endpoint(例如: )· Microsoft Dynamics CRM Discovery Web Service endpoint (例如:)· CRM IFD Federation endpoint (例如: )· Microsoft Dynamics CRM 组织名 (例如: and)· 内部访问地址 - Microsoft Dynamics CRM claims federation endpoint(例如: )(4)防火墙配置你需要设置防火墙来允许CRM 2011和AD FS 2.0所使用的端口上传入的数据流。
HTTPS(SSL)默认的端口是443.2. 配置Claim-based认证-内部访问配置内部访问的Claim-based认证需要完成以下步骤:1. 安装并配置AD FS2.0。
2. 为Claims-based认证配置CRM 2011服务器。
3. 为Claims-based认证配置AD FS 2.0 服务器。
4. 测试claims-based认证内部访问。
安装并配置AD FS 2.0CRM 2011可以与各种STS提供者(STS Provider)一起使用。
本文使用Active Directory Federation Services (AD FS) 2.0 来提供安全令牌服务(security token service)。
注意:AD FS 2.0会安装到默认站点,因此在安装AD FS 2.0之前,必须将CRM 2011安装在新建的站点上。
1) 下载AD FS 2.0请从下述链接下载AD FS 2.0Active Directory Federation Services 2.0 RTW(/fwlink/?LinkID=204237).2) 安装AD FS 2.0在安装向导中选择federation server role进行安装,更多信息可参考Install the AD FS 2.0 Software(/fwlink/?LinkId=192792).3) 配置AD FS 2.01.在AD FS2.0服务器上,点击Start,然后点击AD FS 2.0 Management.2. 在AD FS 2.0 Management页, 点击AD FS 2.0 Federation Server Configuration Wizard.3. 在Welcome 页, 选择Create a new Federation Service, 然后点击Next.4. 在Select Deployment Type页, 选择Stand-alone federation server, 然后点击Next.5. 选择你的 SSL 证书(选择上一节中创建的证书 *), 添加一个Federation Service 名称 (例如, ), 然后点击Next.注意:只有在你为AD FS 2.0网站使用通配符证书的时候,才添加Federation Service 名称。