Outlook 2013 OWA SSO internal and FBA external

[chrisjako]

Hi All,

 

Is it possible to setup outlook OWA 2013 for single sign on internally and have external users directed to a form based authentication instead?

 

Currently I have it setup for SSO which works great however users from home are complaining they cannot get on without me educating them to authenticate with the @domainname.local bit after their username

[RavehDaveh]

Did you ever find a way to do this?

[Norphy]

If you have a spare Windows 2012 R2 box or two, the Web Application Proxy is the official way to do this.

[chrisjako]

No I gave up as ran out of time but will attack it again when things settle down (we've just merged 2 schools and open tomorrow)

 

For the time being I've just gone with FBA but was looking into setting up a shibboleth server to do HAP, OWA, Moodle, RDWEB, SLG & Kayako Supportdesk

[RavehDaveh]

I managed to configure this with Exchange 2010 (after many hours). The only way I found to do it is to add another website in IIS, bind it to a different IP on the local network and mirror the OWA and ECP applications onto this website, enable forms based authentication only (must be done via EMS) for the Default web site (Must be this way round due to outlook anywhere) and configure second website for SSO with NTLM/Kerb Authentication. Set DNS to route internal requests to this second IP.

IISreset /noforce /timeout:240 seemed to be required many times, but I was stumbling in the dark.

[chrisjako]

yes although i didnt try it i also read that is the correct way to set it up

[RavehDaveh]

Update: update your EWS and ActiveSync Internal directories or you'll end up with issues with other services.