When Dynamics CRM platform is configured for claims based access, the following error will be recorded in ADFS event log.



Open PowerShell command window and type in Get-AdfsRelyingPartyTrust -Name [RP Name]


The properties EncryptionCertificateRevocationCheck and SiginingCertificateRevocationCheck should be set to none by running the following commands, CRM in the commands below is the name of he Replying Party Trust set up in ADFS which will change according how RP is set up.:

Set-AdfsRelyingPartyTrust -TargetName CRM -EncryptionCertificateRevocationCheck None

Set-AdfsRelyingPartyTrust -TargetName CRM -SigningCertificateRevocationCheck None