Welcome to ISAserver.org

ISA SSO & ADFS

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Misc.] >> ISA Firewall Coffee Shop >> ISA SSO & ADFS

Page: [1]

Message

<< Older Topic Newer Topic >>

ISA SSO & ADFS - 5.Dec.2006 2:39:36 PM

beljasion

Posts: 3
Joined: 5.Dec.2006
Status: offline

Hi,

I'm presently working on a SSO implementation for a University and one of the requirements is for Shibboleth to be part of thier SSO solution. Unusually the majority of the products in use there (for an Educational Institution) are Microsoft so I can get nearly everything to work seamlessly using ISA 2006 however Shibboleth is creating me a headache.

My best option at this point (other than a great deal of custom code) seems to be using ADFS to act as the identity provider and then hopefully, given that ADFS is supposedly Microsoft's cross platform SSO solution, make ISA work with it. There is next to no information however indicating as to whether this is possible or even the requirements for publishing an ADFS FS-A or FS-R server in normal circumstances.

I asked if it is possible to have ISA 2006 pass the credentials back to and ADFS Account site for Authentication during a Webcast on ADFS recently and recieved an answer that indicated they knew someone would ask eventually but were hopeing it was not quite so soon :). Essentially he indicated that is might be possible with some custom code but no indication of what or where to find info about making it work.

I don't know about the rest of you but I realy don't like the idea of using Anonymous publishing for my secure sites and leaving IIS to do the Authentication & Authorisation via IIS & ADFS ....... Sounds like a RGE to me

Anyway, I'm about to setup a test environment to learn as much about how both ISA 2006 SSO and the ADFS implementation works and would appreciate any information anyone has already managed to glean on such a configuration. Either way once I've found a way (or failed dismally) I'll post agian but at the end of the day I would hate to invent the wheel and then find out someone beat me to it.

Thanks in advance for any assistance.

Kind regards,

Jas :)

Post #: 1

Featured Links*

RE: ISA SSO & ADFS - 9.Dec.2006 9:14:57 AM

tshinder

Posts: 47010
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Jas,

Intergrated with ADFS will come with the next version.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to beljasion)

Post #: 2

RE: ISA SSO & ADFS - 9.Dec.2006 4:14:09 PM

beljasion

Posts: 3
Joined: 5.Dec.2006
Status: offline

Hi Tom,

Thanks for the heads up, I sort of got that impression when I asked the question about interoperability, and received a very round about answer but is nice to have confirmation.

I'm going to press on and see what I can do with the current version and will report back, though based on what you have said I'm going to try and get the University to purchase software assurance with the software so they get this feature when it becomes available. Will be a hard sell, Public Institutions seem to lack a great deal of comprehension when it comes to such things.

Anyway, that the joys of contracting, I'll post again when I have more information.

Kind regards,

Jas :)

(in reply to tshinder)

Post #: 3

RE: ISA SSO & ADFS - 10.Dec.2006 2:35:42 PM

tshinder

Posts: 47010
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Jas,

Great! Let us know how it works out for you.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to beljasion)

Post #: 4