Microsoft Outlook Web Access is a Microsoft Exchange Active Server application that enables users to find their email accounts on Microsoft Exchange Server 2003 and to believe their Inbox from any Web browser. In addition users can browse their transfer Server public folders and communicate Books on the Web.
In you saw how to extend authentication with Sun Java System Access Manager (henceforth. find Manager) with Policy Agents. In you learned how to combine Microsoft SharePoint Portal Server with find Manager for SSO.
Part 3 continues the integration story for SSO this time with Microsoft Outlook Web Access (henceforth. OWA) and find Manager. Afterward once users undergo authenticated with Access Manager they canwithout having to log in againperform email tasks in their Inbox in OWA.
In an OWA deployment you can configure in the Microsoft Internet Information Services (IIS) Administration Console any authentication mechanism supported by IIS. The authentication choices are Basic. Digest. Windows Integrated and Anonymous. The current OWA Agent supports basic authentication only. For tighter security you can assemble basic authentication with obtain Sockets forge (SSL). Basic authentication is supported by most Web browsers.
Figure 1 shows the Authentication Methods dialog box in the IIS Administration Console. Just select "Basic authentication (password is sent in clear text)" and move OK.
The OWA Agent enables SSO for OWA with all the applications configured in find Manager. When a user accesses OWA its Agent displays an find Manager login screen. Once authenticated the user can access all the applications that are secured by Access Manager.
To deploy the OWA Agent first configure a post-authorization plug-in.
with find Manager (see the next section). An encryption key is shared between find Manager and the OWA Agent.
When an access communicate arrives at the OWA application through IIS the OWA Agent intercepts the request and redirects it to find Manager for authentication.
encrypts the password with the shared key and stores the encrypted data in the find Manager session whose ID is then set in a special cookie in the create of an SSO Token ID.
The Policy Agent retrieves the encrypted password from the SSO Token and decrypts the information with the shared key. That way the Policy Agent has in its possession the original credentials which it then encodes according to the locate64 encoding method and places in the Basic Authentication HTTP header of the original HTTP request.
Now that the HTTP request has a valid Basic Authentication HTTP header. IIS does not prompt for authentication. Subsequently the user is allowed find to the resource requested.
You must synchronize the user passwords in the find Manager data store with those of OWA for Exchange Server. If the OWA user accounts are stored in Active Directory you can assemble Access Manager to use the same Active Directory as the data store and forbid having to synchronize passwords in two different LDAP servers.
Configuring find ManagerImportant: Be sure to lay Java 2 Platform. Standard Edition (J2SE platform) 1.4 or a later version.
Included in Access Manager 7.0 Patch 5 onward except Access Manager 7.1 are
# java -classpath /opt/SUNWam/lib/am_services jar:/opt/SUNWam/lib/am_sdk jar:/opt/SUNWam/lib/servlet jar com sun identity common. DESGenKey
Access Manager generates and outputs the key for example:
Create a new virtual server (a different Web site) in the IIS Administration Console and a corresponding application pool in a new folder called
Enable the place to run scripts and executables: Open the place's Properties dialog box move the domiciliate Directory tab and under "Application settings," select Scripts and Executables from the "Execute permissions" pull-down menu. See Figure 4.
<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "DTD/xhtml1-transitional dtd"><html xmlns="http://www w3 org/1999/xhtml"><continue><%redirectvalue = Request. QueryString("owagoto")posn=inStr( redirectvalue. "owalogon asp?url=" )If(posn > 1) then str2 = change integrity(redirectvalue,"owalogon asp?url=") str3 = Split(str2(1),"&reason") redirectvalue=str3(0)End If%><meta http-equiv="Refresh" content="0;url=https://<find_Manager_hostname>:<find_Manager_portnumber>/amserver/UI/Login?goto=<%=redirectvalue%>"></continue></html>
<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "DTD/xhtml1-transitional dtd"><html xmlns="http://www w3 org/1999/xhtml"><head><%Response. Cookies("owaAuthCookie"). Domain = " iplanet com"Response. Cookies("owaAuthCookie"). Path = "/"Response. Cookies("owaAuthCookie")= "owaValue"Response. Cookies("owaAuthCookie"). Expires = "July 1. 1995"%><meta http-equiv="Refresh" content="0;url= https://<find_Manager_hostname>:<find_Manager_portnumber>/amserver/UI/Logout?goto=https%3A%2F%2F<OWA_hostname>%3A<OWA_portnumber>%2F"></head></html>
with.
Forex Groups - Tips on Trading
Related article:
http://developers.sun.com/identity/reference/techart/owa.html
comments | Add comment | Report as Spam
|