The problem occurs because MS CRM is using an HttpModule for multitenancy scenarios. This http module is called with an anonymous user account. This is why it fails when trying to request, i.e. the metadata webservice.
Solution: To make it work, a new entry (remove CrmAuthentication) has to be specified within the web.config file of the specific Add-On.