以编程方式检查用户是否已通过Office 365 / CRM Online进行身份验证

Question

I have an ASP.NET page hosted on an external web server that is embedded in an iFrame within the Contact Form in CRM Online. As of right now, the page shown in the iFrame is accessible to the entire web, but I would like to restrict access to just users that are authenticated to CRM Online / Office 365. Is there a way for me to programmatically check to see if a user is authenticated to CRM Online/Office 365 from my external application? I'm not interested in implementing/authenticating users within my iFrame itself, but rather I'd just like to see if they have a valid login session and if so, display the page, and if not, hide it. Any feedback or direction would be much appreciated.

Answer 1

In this case its probably easiest to do the following:

1. Setup your web page to capture user authentication details - you will need to do this recognise who the user is. This will largely depend on what authentication method you are using. For example, with Windows Authentication you could get the user domain name, ie MyDomain\\james.wood .

2. Then query CRM via web services to check if that user (based on domain name for example) has an system user with security roles, or specific privileges.

This way you don't have to worry about seeing if they are actually logged into CRM. You just check if the user has access to data in CRM. You could look into adding additional checks so that if the web page is opened outside of a CRM iframe, you don't show the web page content. Additionally you could go even further and impersonate the user in any web service calls to CRM.

You may find the following useful.

• Authenticate users in Microsoft Dynamics CRM .
• Sample: Determine whether a user has a role .
• Impersonate another user .

---

Edit

Alternatively you could look to implement single sign on.

Implement single sign-on from an ASPX webpage or IFRAME .