ASA WebVPN OWA SSO Login Configration Example
From DocWiki
(Difference between revisions)
m |
|||
| Line 1: | Line 1: | ||
| - | {{Template:Required Metadata}} | + | {{Template:Required Metadata}} |
| - | ==Introduction== | + | == Introduction == |
| - | <!--Describe the purpose of the example and any unique characteristics of this configuration--> | + | <!--Describe the purpose of the example and any unique characteristics of this configuration--> |
| - | Here you can find the configuration of SSO Login into your OWA account | + | Here you can find the configuration of SSO Login into your OWA account when OWA is configured to use form based authentication. |
| - | Reference: https://supportforums.cisco.com/message/3296206#3296206 | + | Reference: https://supportforums.cisco.com/message/3296206#3296206 |
| - | == | + | == Configuration == |
| - | <!-- | + | <!--Provide any steps, tips, or suggestions to setting up this configuration successfully--> All configurations are done via ASDM! |
| - | + | '''Exchange 2003:''' | |
| - | + | ||
| - | + | Configuration -> Remote Access VPN -> Clientless SSL VPN Access -> Portal -> Bookmarks -> Add/Edit your Bookmarks <br> | |
| + | <pre>URL: https :// <yourhost>/exchweb/bin/auth/owaauth.dll | ||
| - | + | Advanced Options: Post | |
| - | + | ||
| - | + | destination : https://<yourhost>/exchange/ | |
| + | flags : 0 | ||
| + | username : <yourdomain>\CSCO_WEBVPN_USERNAME | ||
| + | password : CSCO_WEBVPN_PASSWORD | ||
| + | SubmitCreds : Login | ||
| + | trusted : 0 | ||
| - | |||
| - | |||
| - | + | </pre> | |
| - | + | '''Exchange 2007:''' | |
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | '''Exchange 2007:''' | + | |
... same as Exchange 2010 ... | ... same as Exchange 2010 ... | ||
| + | <br> | ||
| + | <br> '''Exchange 2010:''' | ||
| + | Configuration -> Remote Access VPN -> Clientless SSL VPN Access -> Portal -> Bookmarks -> Add/Edit your Bookmarks | ||
| + | <pre>URL: https :// <yourhost>/owa/auth/owaauth.dll | ||
| - | + | Advanced Options: Post | |
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | Advanced Options: | + | |
| - | Post | + | |
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | + | ||
| - | For Exchange 2010, in addition a "before-post-script" is required with the following content: | + | destination : https://<yourhost>/owa/ |
| - | cscoSetCookie("PBack","0","/"," | + | flags : 0 |
| + | forcedownlevel : 0 | ||
| + | trusted : 0 | ||
| + | username : <yourdomain>\CSCO_WEBVPN_USERNAME | ||
| + | password : CSCO_WEBVPN_PASSWORD | ||
| + | SubmitCreds : Login | ||
| + | isUtf8 : 1 </pre> | ||
| + | For Exchange 2010, in addition a "before-post-script" is required with the following content: | ||
| + | <pre>cscoSetCookie("PBack","0","/","<yourhost>",-1,0)</pre> | ||
| + | <br>(note: replace <yourhost> with the FQDN of your server) | ||
| - | + | [[Category:Security_and_VPN_Configuration_Examples]] | |
| - | [[Category: | + | |
Latest revision as of 08:04, 25 June 2012
Introduction
Here you can find the configuration of SSO Login into your OWA account when OWA is configured to use form based authentication.
Reference: https://supportforums.cisco.com/message/3296206#3296206
Configuration
All configurations are done via ASDM!
Exchange 2003:
Configuration -> Remote Access VPN -> Clientless SSL VPN Access -> Portal -> Bookmarks -> Add/Edit your Bookmarks
URL: https :// <yourhost>/exchweb/bin/auth/owaauth.dll Advanced Options: Post destination : https://<yourhost>/exchange/ flags : 0 username : <yourdomain>\CSCO_WEBVPN_USERNAME password : CSCO_WEBVPN_PASSWORD SubmitCreds : Login trusted : 0
Exchange 2007:
... same as Exchange 2010 ...
Exchange 2010:
Configuration -> Remote Access VPN -> Clientless SSL VPN Access -> Portal -> Bookmarks -> Add/Edit your Bookmarks
URL: https :// <yourhost>/owa/auth/owaauth.dll Advanced Options: Post destination : https://<yourhost>/owa/ flags : 0 forcedownlevel : 0 trusted : 0 username : <yourdomain>\CSCO_WEBVPN_USERNAME password : CSCO_WEBVPN_PASSWORD SubmitCreds : Login isUtf8 : 1
For Exchange 2010, in addition a "before-post-script" is required with the following content:
cscoSetCookie("PBack","0","/","<yourhost>",-1,0)
(note: replace <yourhost> with the FQDN of your server)
