We have CRM 2011 set up internally and it will only be used internally by users, but we need to allow a 3rd party marketing add-in to access the system from externally. Due to the strict policies in place a second CRM front end server has been added within the DMZ and will just have the Web Services installed to allow the external add-in to communicate with CRM.
Due to the server in the DMZ being on a different domain and the trust only being one way (Internal to DMZ and not the other way around) we are having issues. CRM needs an account to be used that is on the DMZ domain otherwise it gives errors during installation, but an account on that domain cannot be added to the CRM AD groups on the internal domain, so fails authentication to SQL during install.
I don't think we'll be allowed to install ADFS between the two domains, so are there any other options on how we can get this to work?
Thanks