I also ran into this situation. I was able create a CRM plug-in that called SharePoint web services using the following instructions (both CRM and SharePoint are online)...
allthatjs.com/.../remote-authentication-in-sharepoint-online
In my solution, I created an HttpWebRequest for steps 1 & 3. The contents of the request are manually created using the format described in the blog.