Sunday, 14 January 2018

Configuring Dynamics 365 Outlook App On-Premise

Microsoft released the Outlook App with CRM 2016, and then a second much improved version with Dynamics 365, a number of issues and small bugs were identified, but the App is now stable with Update 2.2, I recommend you install this patch to get your Outlook App running smoothly.

A number of people encounter numerous technical hurdles and become frustrated with the lack of documentation available. On this blog post I will go through step-by-step on how to configure the Outlook App for an On-Premise environment, we will configure the following components:
  • CRM OAuth Configuration
  • Exchange Profile
  • ADFS Configuration
  • Pushing the Outlook App to users
Minimum Requirements
  • Dynamics 365 with IFD 
  • Dynamics 365 Update 2.2
  • Minimum ADFS 3.x due to OAuth endpoint
  • Minimum Exchange 2016 or 2013 with Cumulative Update 14 or greater
  • Office 2016 (recommended) although Office 2013 also works fine

How the Outlook App works?
The Outlook App it's an add-in installed on a user Exchange Mailbox. Exchange add-ins have been introduced with Cumulative update 14 for Exchange 2013.

The Outlook App add-in is pushed to the user Mailbox from CRM, no Exchange Server-side configuration or installation is needed, it's all done from CRM. The service account used for Exchange Synchronization requires impersonation rights in order to successfully install the add-in on the user Mailbox.

Minimum Exchange configuration:
  • Exchange Server version 15.0.1236.3.32 (Cumulative Update 14 for Exchange Server 2013) 
  • Exchange 2016

CRM OAuth Configuration
The Dynamics Outlook requires OAuth configuration, on the CRM server execute the following powershell commands:

$ClaimsSettings = Get-CrmSetting -SettingType OAuthClaimsSettings
$ClaimsSettings.Enabled = $true
Set-CrmSetting -Setting $ClaimsSettings

CRM Exchange Setup
Please refer to my previous blog post on how to configure Exchange Server Side synchronization here:

ADFS Configuration
We need to ensure the Outlook App ID is registered with ADFS to allow OAuth authentication to succeed.

First we need to retrieve the Outlook APP ID from CRM, you can access this information on the Settings Menu > Dynamics 365 App for Outlook

you will see the following screen:

Run the following command on the ADFS server:

Add-AdfsClient -ClientId  YOUR_ID  -Name "Dynamics CRM Outlook Client" -RedirectUri https://my_CRM_domain/crmmailapp/code_auth.aspx

ADFS 4.x (windows server 2016)
If you are using ADFS with Windows server 2016, in addition to the above steps, you also need to grant permissions to the Outlook App, please run the following command in powershell:

Please note the domain used here, is the IFD authentication CRM URL, usually named authcrm.domain

Grant-AdfsApplicationPermission -ClientRoleIdentifier YOUR_APP_ID -ServerRoleIdentifier "” -ScopeNames openid

ADFS Authentication Providers
Forms based authentication is required to be enabled on the intranet zone. Open the ADFS management wizard.

Click Authentication Policies > Primary Authentication > Global Settings > Authentication Methods > Edit.

Click Forms Authentication on the Intranet zone.

Installing the Outlook App
As I've mentioned earlier, the Outlook App is installed on the user mailbox from CRM. There are two methods to push the Outlook App to the user mailbox:
  • User manually pushes the Outlook App
  • Administrator pushes the Outlook App from administration panel
The user can push the Outlook App manually under the the Apps for Dynamics 365 under the Cog on the top right menu:

On this Page if the CRM user profile is correctly set up with Exchange Server-Side Sync, you should see a blue button to add the Outlook App, as per the below screenshot.

Clicking on the Outlook App Button, starts the process on the background, the user will see the below message:

To push the Outlook App to multiple users,  access the Settings menu > Dynamics 365 App for Outlook

The Eligible users section will only list users where the Exchange Server Profile was set up and the incoming and outgoing settings are set for Server-Side Exchange Synchronization, please refer to the below screenshot:

After the user Mailbox is correctly configured, you need to Test & Enable the Mailbox

Check the Dynamics 365 App for Outlook Settings Menu, the account is now visible on the Eligible Users, click Add App for Outlook, the status will change to Pending... this may take up to 2 minutes to complete, depending on your infrastructure.

When the app is successfully pushed to the user mailbox, you will see a green message: Added to Outlook 

Internet Explorer Settings
The CRM domains need to be added to the Trusted Sites and Protected Mode needs to be enabled

If you come across multiple authentication pop-ups try to enable anonymous authentication:

Run inetcpl.cpl and click on OK.

  • Go to Security Tab. Click on Trusted Sites lower the security level to Low
  • Enable Protected Mode
  • Add both the internal and external CRM domains “https://crm.domain"
  • Click on custom level and scroll down to user authentication section, select anonymous logon and save changes.


  1. I am happy that I found your post while searching for informative posts. It is very useful.Thanks for sharing.
    Microsoft Dynamics AX Online Training

  2. This is great blog post on configure outlook you can read configure gmail in outlook 2016

  3. This is great blog post you have explained it deeply you can read how to delete gmail account or you can visit our website itprohelps.

  4. This is great blog post you explained it deeply you can read Change gmail account

  5. This post is Very nice post, If any remove a gmail account user face any problems related to chrome then call at how to remove a gmail account from chrome Phone Number +1 888 509 9555.

  6. You described it very good on google not working you can read google search is not working

  7. Thanks for sharing this information with us and i really appreciate how to.change gmail password on iphone


  8. In the event that you don't have the foggiest idea how to recuperate the secret phrase, at that point take help from Gmail specialized help Call Toll Free +1-877-637-1326 How to recover a Forgotten Gmail password.

  9. Nice post. I learn something totally new and challenging on sites . It's always helpful to read content, at that point take help from Gmail specialized help Call Toll Free +1 888 509 9555 reset gmail password without phone number.

  10. It was a really amazing from my remove a gmail account from chrome . I found all the steps helpful; your simple language and clear instructions are easily practicable. Thanks for your help! In some case you don't know how to do that then call us on our toll-free no +1 888 509 9555.

  11. This is realy a Nice blog post read on of my blogs paypal password reset you can visits our websites or toll free no +1 888 509 9555 solve your problem fastly.

  12. I like to read your blog which is so amazing and informative. If you stuck with google account recovery issue then don't panic, you can contact our experts at google account recovery phone number

  13. I like to read your blog because it is so informative & interesting. If you have any trouble like firestick says no signal related any issue then without worry contact our experts by dailing fire stick customer service phone number

  14. This comment has been removed by the author.

  15. Fantastic post.

    Really enjoyed reading it reset gmail password without phone number and held my attention all the way through! Keep it up.

  16. Thanks for posting such a Useful information .You done a great job.
    MS Azure Admin Online Training

  17. Become a professional developer on azure through microsoft azure training

  18. You have shared such a great content with us i will read your others blog too. you can read same quality content here stop unwanted emails in gmail- itdialfast

  19. All the contents you mentioned in post is too good and can be very useful. I will keep it in mind, thanks for sharing the information keep updating, looking forward for more posts.Thanks Gmail account recovery

  20. Removalists in Sydney are experts in removals and storage in Sydney, with tailored moving solutions for local or international moves. removalists Sydney

  21. I just loved your article on the beginners guide to starting a blog.If somebody take this blog article seriously in their life, he/she can earn his living by doing blogging.thank you for thizs article. top devops online training

  22. this is one of the great blog post you can visit my blog to read more awesome content.

  23. This is one of the great blog post on internet you can read one of the great content of my here:spotify error code 3

  24. This is one of the great blog post you can read one of the great content of my here: change gmail password iphone call us our toll free number +1 888 509 9555.

  25. In this article we are going to discuss with you how to fix iMessage Not Working on a Mac, When you use the iPhone to send messages, some display in green while others are blue. The green are standard SMS/MMS messages, and blue messages use iMessage, apple’s proprietary messaging services.

  26. Thanks for sharing information .............
    Read more blog..........

    For more information visit us: How to Fix http Error 500 Facebook
    Contact us: +1 888 509 9555

  27. thanks for information visit us.........
    Read more blog Facebook picture not loading

    For more information visit us:
    Contact us: +1(866)379-1999

  28. Get in touch with Removalists Geelong , the best Removalists in Geelong and they'll make sure that your shifting process is streamlined and that all your belongings are delivered safely to your new abode. So, what are you waiting for? Request a free quote today!!

  29. thanks for sharing information
    Read more blog.........
    Visit us : How to recover avast password
    Contact us: +1(866)379-1999

  30. I am reading your post from the beginning, it was so interesting to read azure online training & I feel thanks to you for posting such a good blog, keep updates regularly..

  31. Looking for more Google Support on
    Recovery of Account
    Phone: 1(866)201-2001

  32. Contact MS Office setup with MS Office setup Assistance Experts If you want to know, how to Improve Unsaved MS Office Data? Dial and update your MS Office setup to use all functions.

  33. Hello! This is my first visit to your blog! We are a team of volunteers and starting a new initiative in a community in the same niche. Your blog provided us useful information to work on. You have done an outstanding job.
    CRM Software