...
2. Grant Application permission to CRM
For Windows Server 2016 and later :-
Grant Application permission to ADFS clients with the required scope(s), by running the following from Administrative PowerShell prompt -
...
https://docs.microsoft.com/en-us/powershell/module/adfs/grant-adfsapplicationpermission
Create client in ADFS Management
(Alternatively, client can also be created from ADFS management screen. Follow the steps below)
...
In ADFS Management, right-click on Application Groups and select Add Application Group.
...
On the Application Group Wizard, enter a Name and under Client-Server applications select the Server application accessing a Web API template. Click Next.
...
Copy the Client Identifier value. (This will be the ClientId we need for connection)
...
Enter the Redirect URI. Click Add. Click Next
...
On the Configure Application Credentials screen, you can optionally choose to Generate a shared secret and copy the secret. (This will be the ClientSecret we need for connection). Click Next.
...
On the Configure Web API screen, enter the the Dynamics URI. Click Add. Click Next.
...
On the Apply Access Control Policy screen, select Permit everyone and click Next.
...
On the Configure Application Permissions screen, make sure openid and user_impersonation are selected and click Next.
...
On the Summary screen, click Next.
...
For AD FS 3.0 on Windows Server 2012 R2 :-
Goto ADFS Management
Expand ADFS > Trust Relationships > Relying Party Trusts
Use the Add Relying Party Trust Wizard
Create a Relying party manually and Permit all users to access this relying party
Obtaining refresh tokens from ADFS
...