ASA WebVPN OWA SSO Login Configration Example
From DocWiki
(Difference between revisions)
(Editing ASA WebVPN OWA SSO Login Configration Example) |
m |
||
| (6 intermediate revisions not shown) | |||
| Line 1: | Line 1: | ||
| - | {{Template:Required Metadata}} | + | {{Template:Required Metadata}} |
| - | ==Introduction== | + | == Introduction == |
| - | <!--Describe the purpose of the example and any unique characteristics of this configuration--> | + | <!--Describe the purpose of the example and any unique characteristics of this configuration--> |
| - | Here you can find the configuration of SSO Login into your OWA account | + | Here you can find the configuration of SSO Login into your OWA account when OWA is configured to use form based authentication. |
| - | + | Reference: https://supportforums.cisco.com/message/3296206#3296206 | |
| - | + | == Configuration == | |
| - | <!-- | + | <!--Provide any steps, tips, or suggestions to setting up this configuration successfully--> All configurations are done via ASDM! |
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | '''Exchange 2003:''' | |
| - | + | ||
| - | + | Configuration -> Remote Access VPN -> Clientless SSL VPN Access -> Portal -> Bookmarks -> Add/Edit your Bookmarks <br> | |
| + | <pre>URL: https :// <yourhost>/exchweb/bin/auth/owaauth.dll | ||
| - | + | Advanced Options: Post | |
| - | + | ||
| - | + | destination : https://<yourhost>/exchange/ | |
| - | + | flags : 0 | |
| + | username : <yourdomain>\CSCO_WEBVPN_USERNAME | ||
| + | password : CSCO_WEBVPN_PASSWORD | ||
| + | SubmitCreds : Login | ||
| + | trusted : 0 | ||
| - | |||
| - | |||
| - | |||
| - | |||
| - | |||
| - | |||
| + | </pre> | ||
| + | '''Exchange 2007:''' | ||
| + | ... same as Exchange 2010 ... | ||
| - | + | <br> | |
| - | + | <br> '''Exchange 2010:''' | |
| + | Configuration -> Remote Access VPN -> Clientless SSL VPN Access -> Portal -> Bookmarks -> Add/Edit your Bookmarks | ||
| + | <pre>URL: https :// <yourhost>/owa/auth/owaauth.dll | ||
| + | Advanced Options: Post | ||
| + | destination : https://<yourhost>/owa/ | ||
| + | flags : 0 | ||
| + | forcedownlevel : 0 | ||
| + | trusted : 0 | ||
| + | username : <yourdomain>\CSCO_WEBVPN_USERNAME | ||
| + | password : CSCO_WEBVPN_PASSWORD | ||
| + | SubmitCreds : Login | ||
| + | isUtf8 : 1 </pre> | ||
| + | For Exchange 2010, in addition a "before-post-script" is required with the following content: | ||
| + | <pre>cscoSetCookie("PBack","0","/","<yourhost>",-1,0)</pre> | ||
| + | <br>(note: replace <yourhost> with the FQDN of your server) | ||
| - | + | [[Category:Security_and_VPN_Configuration_Examples]] | |
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
Latest revision as of 08:04, 25 June 2012
Introduction
Here you can find the configuration of SSO Login into your OWA account when OWA is configured to use form based authentication.
Reference: https://supportforums.cisco.com/message/3296206#3296206
Configuration
All configurations are done via ASDM!
Exchange 2003:
Configuration -> Remote Access VPN -> Clientless SSL VPN Access -> Portal -> Bookmarks -> Add/Edit your Bookmarks
URL: https :// <yourhost>/exchweb/bin/auth/owaauth.dll Advanced Options: Post destination : https://<yourhost>/exchange/ flags : 0 username : <yourdomain>\CSCO_WEBVPN_USERNAME password : CSCO_WEBVPN_PASSWORD SubmitCreds : Login trusted : 0
Exchange 2007:
... same as Exchange 2010 ...
Exchange 2010:
Configuration -> Remote Access VPN -> Clientless SSL VPN Access -> Portal -> Bookmarks -> Add/Edit your Bookmarks
URL: https :// <yourhost>/owa/auth/owaauth.dll Advanced Options: Post destination : https://<yourhost>/owa/ flags : 0 forcedownlevel : 0 trusted : 0 username : <yourdomain>\CSCO_WEBVPN_USERNAME password : CSCO_WEBVPN_PASSWORD SubmitCreds : Login isUtf8 : 1
For Exchange 2010, in addition a "before-post-script" is required with the following content:
cscoSetCookie("PBack","0","/","<yourhost>",-1,0)
(note: replace <yourhost> with the FQDN of your server)
