OWA 2010 SSO

[jvodonnel_]

Has anyone had any success with OWA 2010 and remote SSO? The link below wasn't very helpful. I'm not able to edit the "Resource : * " or the "Post URL : * " fields.

http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB16659&actp=search&searchid=125075505253...

[zanyterp_]

did you create your OWA 2010 bookmark: on the role or as a resource profile? On the former, you would be able to edit these fields on the SSO configuration page; if the latter, you will need to choose the correct type in the profile and configure it there.

[jvodonnel_]

The bookmark was created automatically. Resource profile bookmark tab. I then assigned the profile to a role.

[jvodonnel_]

I ran a dsrecord with JTAC and found out that the <USERNAME> variable wasn't passing the domain name. Auth server for this realm is LDAP no NT/AD (in which case <USERNAME> - domain\username) would work.

These settings worked for me:

Resource URL https://outlook.domain.com:443/owa/auth/logon.aspx?*

Post URL https://outlook.paloma.com:443/owa/auth.owa

Destination Url destination https://outlook.domain.com/owa/ Not modifiable
Flags flags 0 Not modifiable
ForcedDownLevel forcedownlevel 0 Not modifiable
Trusted trusted 0 Not modifiable
Username username {domain name}\<USERNAME> Not modifiable
Password password <PASSWORD> Not modifiable

[unns_]

which code are you running?

[BillHogue_]

I know this is an old post but this was the fix for my problem with OWA 2010 SP through our SA2500s (7.0R3.) SSO is now working. Thanks.

[Kristof_]

Guys,

I have been troubleshooting a bit more on this problem before and the problem is not really the SA. It's more the credentials that are allowed to logon to OWA. You can configure the OWA URL perfectly so that it will paste the Standard domain I believe MS calls it, in automatically when trying to sign on.

If your Exchange admin does not want to change this option, ... the above is indeed the correct way to go!

Thanks,

Kristof

[kreedy_]

Hi....

I'm tryung this tonight and I'm getting an error message: "The user name or password you entered isn't correct. Try entering it again."

Any thoughts???

thanks

[zanyterp_]

What do you see in the dsrecord as the username & password being sent?

[RexPGP_]

BY the way AD attribute "userPrincipalName" is in the format [email protected] I used in OWA, Try the [email protected]