ASA WebVPN with SSO on OWA 2010 Exchange

Hello, I was using WebVPN (clientless) with SSO on Exchange OWA 2003 and it worked very well with these UNIQUE POST authentication settings:

URL: / * Style Definitions * / table. MsoNormalTable {mso-style-name : « Tabla normal » ; mso-tstyle-rowband-taille : 0 ; mso-tstyle-colband-taille : 0 ; mso-style-noshow:yes ; mso-style-priorité : 99 ; mso-style-qformat:yes ; mso-style-parent : » « ;" mso-rembourrage-alt : 0 cm 5.4pt cm 0 5.4pt ; mso-para-marge-haut : 0 cm ; mso-para-marge-droit : 0 cm ; mso-para-marge-bas : 10.0pt ; mso-para-marge-gauche : 0 cm ; ligne-hauteur : 115 % ; mso-pagination : widow-orphelin ; police-taille : 11.0pt ; famille de police : « Calibri », « sans-serif » ; mso-ascii-font-family : Calibri ; mso-ascii-theme-font : minor-latin ; mso-fareast-font-family : « Times New Roman » ; mso-fareast-theme-font : minor-fareast ; mso-hansi-font-family : Calibri ; mso-hansi-theme-font : minor-latin ;} https:// /exchweb/bin/auth/owaauth.dll

destination https:///exchange/
Flags 0

user domain\\user name / * Style Definitions * / table. MsoNormalTable {mso-style-name : « Tabla normal » ; mso-tstyle-rowband-taille : 0 ; mso-tstyle-colband-taille : 0 ; mso-style-noshow:yes ; mso-style-priorité : 99 ; mso-style-qformat:yes ; mso-style-parent : » « ;" mso-rembourrage-alt : 0 cm 5.4pt cm 0 5.4pt ; mso-para-marge-haut : 0 cm ; mso-para-marge-droit : 0 cm ; mso-para-marge-bas : 10.0pt ; mso-para-marge-gauche : 0 cm ; ligne-hauteur : 115 % ; mso-pagination : widow-orphelin ; police-taille : 11.0pt ; famille de police : « Calibri », « sans-serif » ; mso-ascii-font-family : Calibri ; mso-ascii-theme-font : minor-latin ; mso-fareast-font-family : « Times New Roman » ; mso-fareast-theme-font : minor-fareast ; mso-hansi-font-family : Calibri ; mso-hansi-theme-font : minor-latin ;} CSCO_WEBVPN_USERNAME

password / * Style Definitions * / table. MsoNormalTable {mso-style-name : « Tabla normal » ; mso-tstyle-rowband-taille : 0 ; mso-tstyle-colband-taille : 0 ; mso-style-noshow:yes ; mso-style-priorité : 99 ; mso-style-qformat:yes ; mso-style-parent : » « ;" mso-rembourrage-alt : 0 cm 5.4pt cm 0 5.4pt ; mso-para-marge-haut : 0 cm ; mso-para-marge-droit : 0 cm ; mso-para-marge-bas : 10.0pt ; mso-para-marge-gauche : 0 cm ; ligne-hauteur : 115 % ; mso-pagination : widow-orphelin ; police-taille : 11.0pt ; famille de police : « Calibri », « sans-serif » ; mso-ascii-font-family : Calibri ; mso-ascii-theme-font : minor-latin ; mso-fareast-font-family : « Times New Roman » ; mso-fareast-theme-font : minor-fareast ; mso-hansi-font-family : Calibri ; mso-hansi-theme-font : minor-latin ;} CSCO_WEBVPN_PASSWORD

/ * Style definitions * / table. MsoNormalTable {mso-style-name : « Tabla normal » ; mso-tstyle-rowband-taille : 0 ; mso-tstyle-colband-taille : 0 ; mso-style-noshow:yes ; mso-style-priorité : 99 ; mso-style-qformat:yes ; mso-style-parent : » « ;" mso-rembourrage-alt : 0 cm 5.4pt cm 0 5.4pt ; mso-para-marge-haut : 0 cm ; mso-para-marge-droit : 0 cm ; mso-para-marge-bas : 10.0pt ; mso-para-marge-gauche : 0 cm ; ligne-hauteur : 115 % ; mso-pagination : widow-orphelin ; police-taille : 11.0pt ; famille de police : « Calibri », « sans-serif » ; mso-ascii-font-family : Calibri ; mso-ascii-theme-font : minor-latin ; mso-fareast-font-family : « Times New Roman » ; mso-fareast-theme-font : minor-fareast ; mso-hansi-font-family : Calibri ; mso-hansi-theme-font : minor-latin ;} SubmitCreds Log + we

forcedownlevel 0

trust 0

Now, I'm trying to do the same thing with OWA 2010 and it doesn't work. I always get an error on the user credentials

For Exchange 2010, I use these settings:

URL: https:///owa/auth.owa

https:///owa/ destination
Flags 0

username DOMAIN\CSCO_WEBVPN_USERNAME

password CSCO_WEBVPN_PASSWORD

SubmitCreds Log + we

forcedownlevel 0

trust 0

Anyone know how to fix?
Someone at - it work?

Any help?

Thank you

In this configuration, I had to change to HTTP (associated client). It also works well on HTTPS.

Download this tool http://www.fiddler2.com/fiddler2/.

URL: http://internal-mail-server-ip/owa/auth/owaauth.dll

post parameter:

destination: http://internal-mail-server-ip/owa/

flags: 0

forcedownlevel: 0

Trust: 0

username: CSCO_WEBVPN_USERNAME

password: CSCO_WEBVPN_PASSWORD

isUtf8: 1

http://internal-mail-server-ip/owa/auth/owaauth.dll]] >

http://internal-mail-server-IP/OWA/
destination

0
flags

0
forcedownlevel

0
Trust

CSCO_WEBVPN_USERNAME
username

CSCO_WEBVPN_PASSWORD
password

1
isUtf8

Welcome,

Norbert

Hope this helps... Please note so useful

Tags: Cisco Security

Similar Questions

  • Is possible for Apple to sell MBP 13 of 2012 with lower cover of 2010?

    Hello!

    I have two Macbook Pro 13.3 A1278 2012 (according to the motherboard) with lower cover of 2010? State of the seller so that buy on Apple store in 2012.

    Is it possible?

    Kind regards

    Jack

    Is possible for Apple to sell MBP 13 of 2012 with lower cover of 2010?

    N ° the lower Panel has been replaced.

    You can check the serial number of CPU by the terminal in your Applications/Utilities/Terminal.app

    copy and paste:

    system_profiler SPHardwareDataType | AWK ' {print $NF} /Serial/ | Open f

    After you enter, the output appears on your Clipboard.  This should be the same serial number that you see on

     > about this Mac

  • I had Windows server 2008 with microsoft web apps 2010 and I am unable to install KB2553095 to (MS11-072)

    I had Windows server 2008 with microsoft web apps 2010 and I am unable to install KB2553095. While trying to manually download and install its giving message "there are no products made by this package installed on your system", but I had windows web apps 2010 SP1 is installed on all my servers.

    Security bulletins: MS11-072
    Security bulletins: MS11-072

    Security Bulletin: MS11-072

    Hello

    Note that your computer is under domain, you must contact the TechNet forum, where we are the support technicians who are well equipped with knowledge on the issues of domain, do please visit the link provided below.

    http://social.technet.Microsoft.com/forums/en-us/winserverfiles/threads

  • CS-mars does support ASA 5500 with version 8.4?

    Dear all,

    My mars is not able to discover devices Cisco ASA cisco ASA 5550 with last fact IOS is compatible with the CS March...

    Thanks in advance...

    Selva

    After some googleing I found that it is not supported...

    For more information, see link below

    http://www.Cisco.com/en/us/docs/security/security_management/CS-Mars/6.1/compatibility/local_controller/dtlc6x.html#wp85319

    HTH,

    GKP

  • Help with unit 4.2 w / Exchange 2003

    the documentation states that when you use W/2003 and Exchange 2003 with the 4.2 than Exchange unit must be charged on a separate box. Is it because of the limitations of the processor, or is there a compatibility issue? For a laboratory facility, and will only have about 10 boxes set up if that makes a difference.

    This is due to the limits of performance. Note this limitation will be removed in unity 5.0, when our default OS became Windows 2003 and Exchange 2003 becomes the default message store. Unity 5.0 will always support Windows 2000 and Exchange 2000.

  • ASA EzVPN with several remote subnets

    Hello world

    I'll have the challenge of EasyVPN installation based on ASA 5520, and ASA 5505 (with the ASA5505 as the vpnclient) with several networks behind the ASA 5505.

    Access by the network directly connected on the 5505 to the central site works very well.

    But the second network segment (which is behind a router on the directly connected network) cannot connect to the central site.

    I guess I need to specify that some sort of acl's to be able to do that.

    BTW we do not use tunneling split, because all traffic moves through the tunnel (no local internet access).

    The layout looks like this

    (--LAN--)-5520---5505-(--LAN1--)-ROUTER-(--LAN2--)-(WAN)-

    LAN1 and LAN connection works great through the EZVPN Tunnel.

    LAN2 connection to the LAN does not work through the Tunnel of EZVPN.

    Here is the configuration used so far (outside the normal SHEEP, groups of objects and stuff ISAKMP crypto):

    Client:

    vpnclient Server 10.x.x.x

    extension-mode network mode vpnclient

    EzVPN vpngroup vpnclient password *.

    vpnclient username user1 password *.

    vpnclient enable

    Crypto ipsec df - bit clear-df outdoors

    Server:

    internal EzVPN group strategy

    Group Policy attributes EzVPN

    allow to NEM

    allow password-storage

    tunnel-group EzVPN type ipsec-ra

    General characteristics of tunnel-group EzVPN

    Group Policy - by default-EzVPN

    IPSec-attributes tunnel-group EzVPN

    pre-shared key *.

    user user1 password *.

    I hope you can help

    Best regards

    Jarle

    Unfortunately, it is not supported on the platform of the SAA. With EasyVPN on the SAA, only the connected networks can be advertised. To accomplish what you want to do, you need to configure a static IPSec tunnel and announce local networks via ACL interesting traffic. You can also use an IOS device that does not have the capabilities of "multiple subnet" with EasyVPN.

    http://www.Cisco.com/en/us/docs/iOS/sec_secure_connectivity/configuration/guide/sec_easy_vpn_rem.html#wp1098057

  • ASA 5510 with AIP SSM-10

    I'm new to network administration and our company has an ASA 5510 with and map AIP SSM-10. On the interface ASA when I try to load Intrusion detection, he said the following:

    "For IPS 5.1 (1) S205.0, use the link below to access the IPS Device Manager." (If the SSM management IP address or the port is translated, replace them accordingly in the below URL). IPS 6.0.1 or above will be fully interated ASDM. »

    Unfortunately, no URL is displayed below this message and there is no documentation in the company that owns this configuration. Is there a way to reset the AIP without resetting the ASA? How can I find the IP address to be able to configure it?

    The ASA CLI, you will be able to check the IP address of the AIP module:

    view the details of the module

    It will show you the ip address of mgmt of the module, and you can https to the IP address of your PC.

  • BlackBerry 8530 Curve smartphones does not sync with my Microsoft Outlook 2010.

    Curve 8530 does not sync with my Microsoft Outlook 2010.

    Although I used a Palm Treo years, I am new to BB and Metro PCS. The OS is v5.0.0.973. (The Palm Treo has not correctly synchronized since this summer. that's why I got the Blackberry.) Some old Palm Treo data are saved as ASCII files).

    I connect my new BB 8530 via the USB port on my computer. From the Blackberry Desktop Manager 5.0.1 version, I click the icon synchronize. I select the boxes to synchronize the data of the Organizer, to update the time and date of the device and synchronize automatically. When I click on synchronize, the message box asks me if I want to configure synchronization settings now. Ok.

    He asks me to choose an application to synchronize. By clicking on the calendar, select Microsoft Outlook and 2 way to sync. Complete the installation schedule welcome.

    However, when I cliquerai to finish, I get the error message "Microsoft Outlook Connector error: no available message store.» The setting does not save.

    the same result for other applications.

    I shut down my computer and restarted. I deleted the Intellisync folder, as suggested in another post. still no synchronization.

    Sync Suggestions welcome!

    Davsco

    Hi and welcome to the Forums!

    Office of RIM 5.0.1 software tells you that you are using is not compatible with Outlook 2010. You need to upgrade to level 6.0 from the RIM of the Desktop for Outlook 2010 compatibility software. However, if you use Outlook 2010 64-bit, there currently is no version of RIM software which is compatible... only the 32-bit Outlook 2010 is currently compatible.

    Good luck!

  • Oracle EBS with SSO

    Hello

    Can someone please provide me with the DOCs of MOS or any other docs for: how the authentication of users will be coming in EBS when using SSo.

    With on IF SSO authentication via the FND_USEER table.

    How is it different when using SSO? And what are the tables and / or files that it touched during this process?

    --
    Thank you
    Vijay

    But none of above notes give the details about the workflow when EBS is integrated with SSO.

    It is covered with (integration Oracle E-Business Suite Release 12 with 10gR 3 Oracle Internet Directory and Oracle Single Sign-On (10.1.4.3) [376811.1 ID]). See also (Electronic Signature and UNIQUE password authentication doesn't for workflow Notifications [736942.1 ID]).

    Thank you
    Hussein

  • Use obiee 11g with SSO

    Hello

    With the help of obiee 11g in GNU / linux.
    I would like to know the steps to integrate with SSO.
    Any help?

    Thank you

    Hello
    Try link below

    http://sranka.WordPress.com/2008/06/06/enabling-SSO-authentication-for-OBIEE/
    http://Gellio.WordPress.com/2009/10/23/enabling-Oracle-single-sign-on-Osso-with-OBIEE/
    OBIEE, OAS, OID or SSO integration
    http://sranka.WordPress.com/2008/06/06/enabling-SSO-authentication-for-OBIEE/
    http://www.addidici.com/blog/?p=8
    http://download.Oracle.com/docs/CD/E12096_01/books/AnyDeploy/AnyDeploySSO3.html

    Thank you

    Deva

  • Upgrade ERP database 11g and ATG7 with SSO integration

    Please let us know how to perform upgrade BY Database 11g and ATG7 with SSO decline.

    Kind regards.

    Is there any space stage, do we do if we have implemented SSO after upgrade DB 11 g and 7 ATG?

    You can follow the same approach to upgrade the database and apply the fixes 7 ORS ATG group level.

    Please make sure that you apply the patches in (known issues on top of 11i. ATG_PF. H.Delta.7 (RUP7) - 6241631 [858801.1 ID]). In addition, make a full backup before you start this on your instance of production and if possible get an instance cloned with SSO enabled and test all patches on an identical instance.

    Thank you
    Hussein

  • EBS in OID export profile with SSO

    Hello

    I have integrated with SSO and OID EBS. I have BSE OID import active profile. It's users created in OIDS are currently created in EBS.

    I want to use the export for EBS to migrate users OID profile too for a two-way synchronization. As I have my SSO integrated with EBS, the FND_USERS in EBS does not record the password, instead of this it shows 'EXTERNAL'.

    The question is: when I create a new user in EBS, its uid and password are stored in FND_USERS. So when profile exports its record in OID, the FND_USER this time will always have the password or it will set to 'EXTERNAL '.

    I need all users to be authenticated by the SSO with password controls in the OID and not in ' FND . USERS' _

    Thanks in advance,
    Naomie

    Hello Lawrence,.

    Regardless of the method of synchronization (uni - or bidirectional), user passwords for E-Business Suite integrated with SSO environments are managed entirely OID. The value of password in FND_USER applies only to users who are authorized to bypass SSO and log on locally via the page OA_HTML/AppsLocalLogin.jsp.

    I don't have direct experience on a system configured for bidirectional synchronization and I havne't got up the documentation to be sure, but my assumption is that, when you create a user in EBS, the process will be as follows:
    (1) user name and password will be passed to EBS to OID as well as other information as specified in the provisioning profile
    (2) OID generates a GUID for the new user, which is stored in FND_USER. USER_GUID once the user authenticates to the EBS via SSO

    I hope this helps answer your question. If this isn't the case, I'm happy to try to clarify.

    Kind regards

    John P.
    http://only4left.jpiwowar.com

  • ASA WebVPN SSO with cactus

    Hello

    I use SSO with HTTP POST parameters for SINGLE sign-on for web applications behind my ASA.

    I am currently playing with cactus.

    My settings are:

    action = login

    login_username = CSCO_WEBVPN_USERNAME

    login_password = CSCO_WEBVPN_PASSWORD

    Realm = ldap

    The connection works fine, but after the post OFFICE, the Web server sends a HTTP "302 OK code." Normally, it should be "302 moved" or "200 OK".

    The ASA does not include what to do, to do nothing and replies with an error "Server is not available >.

    When I press the 'Home' button and click again on the bookmark of cactus, I'm connected to cactus. It seems that there is a cookie or something missing.

    When I do exactly the same with a browser, it sends after the "302 OK" normal GET and I am connected.

    Me seems a mistake in cactus, but I'm not also sure if ASA does not respond properly?

    Also, when I change the type of bookmark of https to post, it works! BUT: post plugin only supports http and not https, so my connections has send in clear on the internal network.

    Any ideas?

    Thank you

    MB

    configure the POST plugin for HTTPS by using the csco_proto=https parameter
    in the Post-Plugin URL

  • Error attaching file or deleting email in OWA for Exchange 2010

    Cannot complete this action you tried to run because there is a configuration problem on the server. If the problem persists, contact your support center. The entire error report is listed below: view report

    This problem just started, I know. iPhones still good sync and Outlook has no problem.

    Windows 2008 R2 Standard, Exchange Server 2010 Standard.

    I read articles that say it could be antivirus causes this problem. I disabled AVG Antivirus and the same problem occurs.
    I've also seen mentions of IPv6, I disabled IPv6 and the problem persists.

    Interesting though, if I try to attach a file and I have let it fail and then select the button attach still opens a separate window of the Web browser and when I select a file this time it works. The first time her opens the window browser that it uses a Windows Explorer box the second time, opens a Web browser window. This problem has been for the first time by using Internet Explorer, but the problem also occurs in Firefox.

    Thank you

    Mike

    Hi Mike,.

    The question you posted would be better suited in the Technet forums. Please visit the link below to find a community that will support what ask you
     
    Or
     
     
    Hope this information helps.
  • Exchange 2003 Migration to Office365 with SSO

    Hi all

    Merry Christmas to start!

    I work for a company that run Exchange 2003. We plan to do a migration to Office365 and I am researching on the best solution.

    I am aware that there are three main options available, hybrid/intermediary/putting in service.

    My instincts suggest that the best option would be to complete the migration using the staging process, but I think that if I take this route I can't implement single sign on? This is the case...

    If so, is this means to ensure single sign-on can be used, then I can only implement a hybrid solution?

    Hello

    And a Merry Christmas to you, too.

    Your Question is beyond the scope of this community.

    Please repost your Question in Exchange for TechNet Forums.

    https://social.technet.Microsoft.com/forums/Exchange/en-us/home?Forum=exchangesvrgenerallegacy

    See you soon.

Maybe you are looking for