WCF-WebHttp Send Port authenticating to Dynamics CRM fails

Question

I'm trying to configure a WCF-WebHttp send port for accessing the Dynamics CRM OData REST WebAPI but I hit a road block getting the authentication behavior to work.

Configuring the endpoint Url, credentials and transport security the send port fails to process messages with the error

System.IO.IOException: Authentication failed because the remote party has closed the transport stream.

Following BizTalk 2013 to CRM 2011 Integration I tried to use the ClientCredential endpoint behavior but the problem stays the same.

I am aware that the problem is to retrieve the authentication token but I have not found any way to create an endpoint behavior being able to handle this.

I have a working WCF-Custom SP targeting the SOAP endpoint but I couldn't find any trace of the schema usually provided as part of the CRM SDK in v9.0.2.4 so I figured Microsoft is gently nudging us towards the new REST Web API instead.

Answer 1

The latest version of Dynamics CRM requires TLS 1.2 as per Microsoft Dynamics 365 Customer Engagement (online) to require TLS 1.2 for connectivity

To enable that you either

• need to change your End Point Behaviour to tell it to use TLS 1.2 the same way that it was done for the Saleforce End Point Behaviour in this blog Salesforce disabling TLS 1.0 – How to get it working for API calls via BizTalk
• or make sure that you have the correct CU installed as per Support for TLS 1.2 protocol in BizTalk Server and then follow the link from there to the article MS16-065: Description of the TLS/SSL protocol information disclosure vulnerability (CVE-2016-0149): May 10, 2016 which tells you to set the SchUseStrongCrypto registry key. Note: This second option is server wide and will make ALL connections try TSL 1.2 first.