Welcome to ISAserver.org

Web Publishing and SSO

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Publishing] >> Web Publishing >> Web Publishing and SSO

Page: [1]

Message

<< Older Topic Newer Topic >>

Web Publishing and SSO - 1.Jul.2008 4:00:02 PM

gunjan151

Posts: 32
Joined: 24.Apr.2008
Status: offline

I am creating a Web publishing rule to publish a external website. Authentication is done by the Internal server.ISA acting as reverse proxy forwards the request to the internal server which takes care of user Authentication & Authorization.

Listner accepts both HTTP & HTTPS connections.

Listner for the rule requires Authentication :

HTTP Authentication -> Basic
Advanced -> Allow clinet authentication over HTTP.

In the rule under User tab if i select "Authenticated Users" everytime i access the URL it propmts me to enter credentials which i do not want as Authentication is done by the Backend server.

In the Rule under " Authentication Delegation" -> i have selected "No delegation, but the client may authenticate directly".

if i select " All users" i get a warning message that it is not allowed.

I go ahead and select "All Users" configuration and Publishing rule works fine. Wanted to confirm if the config that i did is the correct way if u want backend server to perform Authentication.

Post #: 1

Featured Links*

RE: Web Publishing and SSO - 1.Jul.2008 6:33:08 PM

Jason Jones

Posts: 1973
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

Under delegation, choose "basic delegation" as this will provide the best security and you will only "see" one authentication request even though it is happening at both ISA *and* the backend server transparently.

_____________________________

Jason Jones
Microsoft MVP (Forefront Edge Security)

Silversands Ltd
http://www.silversands.co.uk
View My Blog: http://blog.msfirewall.org.uk/

Get Our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to gunjan151)

Post #: 2

RE: Web Publishing and SSO - 2.Jul.2008 11:35:12 AM