Dynamics Customer Engagement V9版本配置面向Internet的部署时候下一步按钮不可点击的解决办法

微软动态CRM专家罗勇 ，回复299或者20190120可方便获取本文，同时可以在第一间得到我发布的最新博文信息，follow me！我的网站是 www.luoyong.me 。

Dynamics 365 Server 版本 9.0 在2018年12月5日已经可以下载了，简体中文版下载网址是：https://www.microsoft.com/zh-CN/download/details.aspx?id=57478 。

我最近也下载了一个，在配置IFD的过程中发现了一个问题，在【配置面向Internet的部署】时候，输入面向Internet的服务器所在的外部域后，【下一步】按钮不可点击，无论你输入什么值。

咋回事？我也看了AD FS错误日志如下：

Encountered error during federation passive request.

Additional Data

Protocol Name:
wsfed

Relying Party:
https://demo.luoyong.me/

Exception details:
Microsoft.IdentityServer.RequestFailedException: MSIS7012: An error occurred while processing the request. Contact your administrator for details. ---> Microsoft.IdentityServer.Service.SecurityTokenService.EmptyOrMissingWSFederationPassiveEndpointException: MSIS5004: The WSFederationPassiveEndpoint address is not configured on the relying party trust identified by the endpoint 'https://demo.luoyong.me/'. It is required to process the current request.
at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationProtocolHandler.ValidateAndUpdateReplyToForSigninMessage(MSISSignInRequestMessage& wsFedSigninRequest, WrappedHttpListenerRequest httpRequest)
at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationProtocolHandler.BuildSignInResponseCoreWithSerializedToken(MSISSignInRequestMessage wsFederationPassiveRequest, WrappedHttpListenerContext context, SecurityTokenElement signOnTokenElement, Boolean isKmsiRequested, Boolean isApplicationProxyTokenRequired)
at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationProtocolHandler.BuildSignInResponseCoreWithSecurityToken(WSFederationSignInContext context, SecurityToken securityToken, SecurityToken deviceSecurityToken)
at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationProtocolHandler.BuildSignInResponse(WSFederationSignInContext federationPassiveContext, SecurityToken securityToken, SecurityToken deviceSecurityToken)
--- End of inner exception stack trace ---
at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationProtocolHandler.BuildSignInResponse(WSFederationSignInContext federationPassiveContext, SecurityToken securityToken, SecurityToken deviceSecurityToken)
at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationProtocolHandler.Process(ProtocolContext context)
at Microsoft.IdentityServer.Web.PassiveProtocolListener.ProcessProtocolRequest(ProtocolContext protocolContext, PassiveProtocolHandler protocolHandler)
at Microsoft.IdentityServer.Web.PassiveProtocolListener.OnGetContext(WrappedHttpListenerContext context)

Microsoft.IdentityServer.Service.SecurityTokenService.EmptyOrMissingWSFederationPassiveEndpointException: MSIS5004: The WSFederationPassiveEndpoint address is not configured on the relying party trust identified by the endpoint 'https://demo.luoyong.me/'. It is required to process the current request.
at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationProtocolHandler.ValidateAndUpdateReplyToForSigninMessage(MSISSignInRequestMessage& wsFedSigninRequest, WrappedHttpListenerRequest httpRequest)
at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationProtocolHandler.BuildSignInResponseCoreWithSerializedToken(MSISSignInRequestMessage wsFederationPassiveRequest, WrappedHttpListenerContext context, SecurityTokenElement signOnTokenElement, Boolean isKmsiRequested, Boolean isApplicationProxyTokenRequired)
at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationProtocolHandler.BuildSignInResponseCoreWithSecurityToken(WSFederationSignInContext context, SecurityToken securityToken, SecurityToken deviceSecurityToken)
at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationProtocolHandler.BuildSignInResponse(WSFederationSignInContext federationPassiveContext, SecurityToken securityToken, SecurityToken deviceSecurityToken)

这个错误的意思我倒是明白了，就是WSFederationPassiveEndpoint这个没有配置支持我的CRM访问地址。打开名称为【CRM IFD Relying Party】的信赖方信任，切换到它的【Endpoints】这个Tab，会发现这个Tab中的内容是空的，如果正常的话是有值的，值应该是 Https://auth.luoyong.me 。你还会发现这个信赖方信任的【Identifiers】中的三个其中有一个是uri:IfdMicrosoftDynamicsCrm ，这个本来应该是 https://auth.luoyong.me 的。

那我可以修改创建信赖方信任的时候导入的Xml文件吗？尝试了不行。后来我搜索到了答案，MSCRM The next button is disabled on IFD configuration wizard ，具体做法是登录Dynamics 365 Customer Engagement对应的数据库，执行如下SQL(其中一个是查看现状的)：

USE MSCRM_CONFIG

SELECT a.NVarCharColumn  FROM [dbo].[FederationProviderProperties] a
where ColumnName ='ExternalRelyingPartyPassiveIdentifier'

update [FederationProviderProperties]
set NVarCharColumn ='https://auth.luoyong.me/'
where ColumnName ='ExternalRelyingPartyPassiveIdentifier'

然后重启下IIS，关闭部署管理器(Deployment Manager) 重新打开即可，这样IFD就可以配置成功了，截图给大家看下安装完简体中文版本的Dynamics 365 Customer Engagement V9版本的界面。