I am getting an error with the discovery services. The URL works but there seems to be a problem with the credentials (I am using admin credentials which worked before). When I look at the http traffic with fiddler I see that during the authentication process the html login screen that all the users get when logging in on IE is sent back. Since this is just a communication between the CRM server and ADFS server I obviously never see that login screen and I believe therefore the authentication fails.
So if indeed that login screen should not be sent then my best guess is that the original credentials were not accepted, hence the login screen is being sent back. That then leads to the question what kind of access rights a user (in my case the administrator) needs to have in order to retrieve the organizations from the discovery service. Does the user need access rights to SQL, to the SQL service, to other services, etc?