Sharepoint support for versions prior to 2010SP1

[VassilisBoulogi]

Hi all,

I understand that claims authentication in Sharepoint is available for versions 2010SP1 or later and Via Access should support it.

What about previous Sharepoint versions (2007, 2010 pre SP1) that do not support claims authentication? Would Kerberos authentication work?

Thanks a lot,

Vassilis

[AngeloColesanto]

Hi Vassilis,

To integrate previous version of Sharepoint you will need to user “user impersonation” in IIS, this cannot be done without an agent on IIS, so for Via Access (that is agent-less) you will need to add AxM that has a functionality called “protocol transition, that is actually the “user impersonation”.

KR

Angelo

[KarimElatov]

There are two connectors for Sharepoint Servers:

1. WS-Federation based which uses the Claims-Based approach
2. NTLM Based which is similar to HTTP Federation except it uses NTLM Authentication

If Sharepoint 2007 and 2010 pre SP1 support NTLM Authentication then using the 2nd type of connector could work.

[AngeloColesanto]

Hi Karim,

Thanks for the update.

Is the NTLM an Agent based connector?

Thanks

Angelo Colesanto

(Sent from iPhone, please excuse typos and brevity)

[KarimElatov]

It is not, it follows the reverse proxy approach and when we see the 401 Response with the WWW Authenticate:NTLM header from sharepoint the IDR POSTs the user's credentials (stored on the IDR as a password vault) to sharepoint.

[MichaelDalton]

Is there any documentation on the NTLM integration discussed in the thread?  I checked the online help and it
didn’t return any results on NTLM.   Looking for a guide ideally…

[LenoreTumey]

Yes - this guide was just posted:  Microsoft SharePoint - RSA Via Access NTLM Implementation Guide

Hope this helps!

[MichaelDalton]

Yes, it does! Thanks

Best Regards,

Michael Dalton, CISSP, CISA, RSA CSE | RSA Senior Via Sales Engineer | The Security Division of EMC | 860.324.7449| michael.dalton@rsa.com<mailto:michael.dalton@rsa.com>