Comments on: Integrated Authentication and Exchange 2007 http://www.shudnow.net/2007/09/27/integrated-authentication-and-exchange-2007-problem/ Just another IT guy! Wed, 08 Sep 2010 21:02:40 -0600 hourly 1 http://wordpress.org/?v=3.0.1 By: JSmith http://www.shudnow.net/2007/09/27/integrated-authentication-and-exchange-2007-problem/comment-page-1/#comment-7866 JSmith Thu, 20 Aug 2009 16:35:16 +0000 http://www.shudnow.net/2007/09/27/integrated-authentication-and-exchange-2007-problem/#comment-7866 GREAT Post. You spelled out the 'limitations' precisely (as I've been encountering anyway), so that I didn't get lost between the lines of the M$ articles that only spell out what is supported. We user Windows/Integrated Auth for our entire Intranet here, and there are several applications across several webservers that provide my users with alot of stuff, in one place. It's silly to have them log into their PC's and then into the website, so Integrated/Windows Auth solved this. I am mid-Migration to Exch2007 but now I have to wait until all mailboxes are moved to Exch2007 MB Role, for the Integrated Auth to work for them for their email; if they use it via OWA. I think this is an oversight on M$ part. Lots with Exch2007 are wonderful, especially the new OWA; but the coexistence piece has alot of missing pieces I think. One work around I'm am working towards is using ISA as the Publishing Front End. Currently it has FBA for the outside, and therefore proxies Basic Auth into the CAS, and thus OWA works great for both versions through the CAS. I think if I enable an internal Web-Listener on ISA with Integrated Auth, ISA will proxy Integrated Auth to the CAS, and I will be no further ahead, but I think I might try. GREAT Post. You spelled out the ‘limitations’ precisely (as I’ve been encountering anyway), so that I didn’t get lost between the lines of the M$ articles that only spell out what is supported.

We user Windows/Integrated Auth for our entire Intranet here, and there are several applications across several webservers that provide my users with alot of stuff, in one place. It’s silly to have them log into their PC’s and then into the website, so Integrated/Windows Auth solved this.

I am mid-Migration to Exch2007 but now I have to wait until all mailboxes are moved to Exch2007 MB Role, for the Integrated Auth to work for them for their email; if they use it via OWA.

I think this is an oversight on M$ part. Lots with Exch2007 are wonderful, especially the new OWA; but the coexistence piece has alot of missing pieces I think.

One work around I’m am working towards is using ISA as the Publishing Front End. Currently it has FBA for the outside, and therefore proxies Basic Auth into the CAS, and thus OWA works great for both versions through the CAS. I think if I enable an internal Web-Listener on ISA with Integrated Auth, ISA will proxy Integrated Auth to the CAS, and I will be no further ahead, but I think I might try.

]]>