Web Publishing and SSO (Full Version)

All Forums >> [ISA 2006 Publishing] >> Web Publishing



Message


gunjan151 -> Web Publishing and SSO (1.Jul.2008 4:00:02 PM)

I am creating a Web publishing rule to publish a external website. Authentication is done by the Internal server.ISA acting as reverse proxy forwards the request to the internal server which takes care of user Authentication & Authorization.

Listner accepts both HTTP & HTTPS connections.

Listner for the rule requires Authentication :

HTTP Authentication -> Basic
Advanced -> Allow clinet authentication over HTTP.

In the rule under User tab if i select "Authenticated Users" everytime i access the URL it propmts me to enter credentials which i do not want as Authentication is done by the Backend server.

In the Rule under " Authentication Delegation" -> i have selected "No delegation, but the client may authenticate directly".

if i select " All users" i get a warning message that it is not allowed.

I go ahead and select "All Users" configuration and Publishing rule works fine. Wanted to confirm if the config that i did is the correct way if u want backend server to perform Authentication.





Jason Jones -> RE: Web Publishing and SSO (1.Jul.2008 6:33:08 PM)

Under delegation, choose "basic delegation" as this will provide the best security and you will only "see" one authentication request even though it is happening at both ISA *and* the backend server transparently.




gunjan151 -> RE: Web Publishing and SSO (2.Jul.2008 11:35:12 AM)

Thanks Jason...will make this change and test it out.




Page: [1]