Best Practices - EWS Authentication and Access Issues

Authentication and access to a mailbox is an often misunderstood area.  I’m going to cover Authentication and type of access (impersonation vs delegate access vs direct access) and common problems developers run into in this article. Authentication vs Authorization. Lets start from the beginning with some basic information on authentication and authorization,  The first thing…

3

OWA Single-sign-on support

OWA 2010 and prior is considered non-extensible as far as Microsoft is concerned in the area of doing single-sign-on programmatically.  The exception to this would be when a person is in-network and uses their existing network credentials to access OWA through Windows Authentication.  Please understand that while there are some ways people have been working…

1

Using ISAPI Extensions to change-out OWA Credential is not supported

Single sign-on applications usually use an ISAPI Extension on Exchange servers in order to swap-out credentials being passed to OWA.  This type of manipulation is not supported by Microsoft.  In fact any thing which augments the behavior in this way is not supported.  While such filters/extensions may have worked with Exchange 2000 and 2003, they…

4