OWA HFED integration error with RSA SecurID Access
Originally Published: 2019-04-08
Last Modified: 2023-11-30
Article Number
Applies To
RSA Product/Service Type: Cloud Authentication Service
Issue
However users cannot login to OWA from the application portal: The following message is seen:
Unsuccessful logon
Cause
Workaround
- Login to the Administration Console and navigate to Applications > My Applications > Add an Application > Create From Template > Choose HTTP Federation Proxy
- Input a Name for your application and click Next Step.
- Select Connection Method as Manual and click Next Step.
- In the Connection Profile section enter:
- Logon Form URL: https:<your-OWA-server>/owa/authlogon.aspx
- Logon Form Action: https://<your-OWA-server>/owa/auth.owa
- Logon Form Fields and Input Value Types:
| Identifier | Name |
Purpose
| Value |
|---|---|---|---|
| isUtf8 | Use Form Value | ||
| passwordText | passwordText | Constant Value | |
| destination | Use Form Value | ||
| password | password | Password | |
| forcedownlevel | Use Form Value | ||
| flags | Use Form Value | ||
| username | username | Username |
- In Failure Detection enter Indicator: VISIBLE_TEXT, Criteria: Does Not Contain, and Value: <string OWA returns for successful login>. For German, for example, this string is "the Postfach wird geoffnet"
- Click Next Step.
- In the Proxy Settings create two Web Servers, as follows:
- Proxy Hostname: help-outlook-com.<your-protected-domain-name>, Real Hostname: help outlook.com, Rewrite Rules: Substitute "s|help.outlook.com|help-outlook-com.%DOMAIN_NAME%|qin"
- Proxy Hostname: owa-hfed.<your-protected-domain-name>, Real Hostname: <your-OWA-server>, Rewrite Rules: Substitute "s|help.outlook.com|help-outlook-com.%DOMAIN_NAME%|qin"
- Custom Headers: Check Verify Certificates checkbox and click Next Step
- Set the User Access and Portal Display sections as desired.
- Save and publish.
Related Articles
Additional screen shots for steps configuring Outlook Web Access (OWA) Single-Sign On (SSO) Number of Views Increase timeout for RSA Authentication Agent for Web for IIS implemented for OWA Number of Views Microsoft Outlook on the Web 2016 - RSA Ready SecurID Access Implementation Guide Number of Views RSA Authentication Agent for Web for IIS protecting Microsoft Outlook Web Access (OWA) with single sign-on (SSO), but gett… Number of Views Microsoft Outlook Web Access 2013 - HFED SSO Agent Configuration - SecurID Access Implementation Guide Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device Reporting on RSA Authentication Manager 8.x users with On-Demand Token, a fixed passcode or a hardware/software token assi… How to Download OTP Token Seed Files from myRSA Anomalix idGenius - SAML Relying Party Configuration - RSA Ready Implementation Guide RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide
Don't see what you're looking for?
