How to configure Application Offloading for OWA 2013 (Exchange 2013) with Automatically Log In
Description
This article describes how to configure an offloading portal - OWA 2013 with Automatically log in option and Forms-Based Authentication
In this scernario:Domain - papaj122.com
Domain configured in SRA for Active Directory Users - papaj122.com-ADÂ
10.0.0.12 - Exchange 2013 Server
10.0.0.114 - SRA VirtualOffice (LocalDomain)
10.0.0.120 - New Portal with OWA (owa.papaj122.com)
Exchange server is using the:
- Basic Authentication
- Forms-Based authentication > User name only
Resolution
Step 1:Â Check the Exchange (OWA) authentication mode.
Please go to https://exchange_server/ecp (https://10.0.0.12/ecp)Â and login as administrator.
Under Servers > Virtual Directories > OWA > Authentication we can check the authentication methods.
This scenerio is using Basic with User name only.-with-Automatically-Log-In-kA1VN0000000JZ90AM-0EMVN00000Enz7T.png)
Step 2: Please login to the SRA device https://10.0.0.114 and login as Administrator in LocalDomain.
Please go to Portals > Portals > Offload Web Application.
Under the General Tab we can setup the Portal Name, Site Title, Banner Title and Login Message.
In this scenario we use test for Name and OWA 2013 for Name and Title.
on the Offloading page we need to setup the Scheme, Server information and automatically login.
Scheme - Secure Web (HTTPS)
Application Server Host - exchange_server (or 10.0.0.12)
Homepage URL (optional) - /owa/
Enable Automatically log in with Use SSL VPN account credentials.
We should enable the Forms-based Authentication as well and fill out the user and password fields
User Form Field: username
Password Form Field: password-with-Automatically-Log-In-kA1VN0000000JZ90AM-0EMVN00000Enz7a.png)
Step 3: On the Virtual Host Page we need to configure the new portal IP address and Domain Name which should point to this IP.
To make such configuration we need to have one free IP address. Here it is 10.0.0.120 and the domain name which will point to this IP - owa.papaj122.pl.-with-Automatically-Log-In-kA1VN0000000JZ90AM-0EMVN00000Enz7R.png)
After accepting the settings we should see the new portal.
We should be able to ping 10.0.0.120 or owa.papaj122.com.-with-Automatically-Log-In-kA1VN0000000JZ90AM-0EMVN00000Enz7S.png)
Step 4: Adding domain to new portal.
Go to Portals > Domains next to papaj122.com-AD and click Configure.
Please add test (new OWA Offloaded Portal) to the domain (Portal name) by clicking on it (when using multiple domains, please use the Ctrl key)-with-Automatically-Log-In-kA1VN0000000JZ90AM-0EMVN00000Enz7Q.png)
Step 5: Login to the new portal - owa.papaj122.com.
Please browse the https:owa.papaj122.com website and login using the credential from papaj122.com-AD.-with-Automatically-Log-In-kA1VN0000000JZ90AM-0EMVN00000Enz7Z.png)
See Also:
What is Application Offloading? (Web Application Firewall FAQ)