Single authentication for multiple IIS 6 servers

Single authentication for multiple IIS 6 servers

am 24.03.2006 17:29:56 von michael.ahearn

Thanks in advance for your help ...

Environment:
.. We have several IIS servers, one for each of the following: Exchange 2003
OWA, Sharepoint 2003, and CRM 3.
.. All are Windows 2003 and part of the same domain
.. Web access is set to integrated on all servers.
.. Network is behind a Symantec Enterprise Firewall v8.

Scenario:
.. From outside of our network, a user logs into OWA with their domain
credentials (domain\username) and checks their email. All works fine.
.. From OWA, without closing the browser window, the user connects to our
Sharepoint 2003 server (or CRM 3) and is prompted for credentials again.

Questions:
.. Is this behavior by design?
.. Is there a way to make it so users do not have to login to every server?
A "one-login-fits-all" solution.


Again, any assistance is much appreciated,

Michael Ahearn
michael.ahearn@stockell.com

Re: Single authentication for multiple IIS 6 servers

am 26.03.2006 12:51:09 von Ken Schaefer

Hi,

"Yes", this is by design. It's the way the HTTP specification works.

However, most browsers can be configured to attempt an "auto logon" with the
currently logged on user's credentials, and if that fails, then prompt the
user to supply alternate credentials.

Assuming you are using IE, add the sites to the user's Intranet Security
zone in IE, and auto logon should kick in for you.

Cheers
Ken

"news.microsoft.com" wrote in message
news:eK%23n$B2TGHA.1572@tk2msftngp13.phx.gbl...
: Thanks in advance for your help ...
:
: Environment:
: . We have several IIS servers, one for each of the following: Exchange
2003
: OWA, Sharepoint 2003, and CRM 3.
: . All are Windows 2003 and part of the same domain
: . Web access is set to integrated on all servers.
: . Network is behind a Symantec Enterprise Firewall v8.
:
: Scenario:
: . From outside of our network, a user logs into OWA with their domain
: credentials (domain\username) and checks their email. All works fine.
: . From OWA, without closing the browser window, the user connects to our
: Sharepoint 2003 server (or CRM 3) and is prompted for credentials again.
:
: Questions:
: . Is this behavior by design?
: . Is there a way to make it so users do not have to login to every server?
: A "one-login-fits-all" solution.
:
:
: Again, any assistance is much appreciated,
:
: Michael Ahearn
: michael.ahearn@stockell.com
:
:

Re: Single authentication for multiple IIS 6 servers

am 20.04.2006 21:22:59 von michael.ahearn

Took awhile for me to get back in here and read it. Was off on other
projects ...

Thanks for your reply.



"Ken Schaefer" wrote in message
news:uL0qyMMUGHA.1576@tk2msftngp13.phx.gbl...
> Hi,
>
> "Yes", this is by design. It's the way the HTTP specification works.
>
> However, most browsers can be configured to attempt an "auto logon" with
> the
> currently logged on user's credentials, and if that fails, then prompt the
> user to supply alternate credentials.
>
> Assuming you are using IE, add the sites to the user's Intranet Security
> zone in IE, and auto logon should kick in for you.
>
> Cheers
> Ken
>
> "news.microsoft.com" wrote in message
> news:eK%23n$B2TGHA.1572@tk2msftngp13.phx.gbl...
> : Thanks in advance for your help ...
> :
> : Environment:
> : . We have several IIS servers, one for each of the following: Exchange
> 2003
> : OWA, Sharepoint 2003, and CRM 3.
> : . All are Windows 2003 and part of the same domain
> : . Web access is set to integrated on all servers.
> : . Network is behind a Symantec Enterprise Firewall v8.
> :
> : Scenario:
> : . From outside of our network, a user logs into OWA with their domain
> : credentials (domain\username) and checks their email. All works fine.
> : . From OWA, without closing the browser window, the user connects to our
> : Sharepoint 2003 server (or CRM 3) and is prompted for credentials again.
> :
> : Questions:
> : . Is this behavior by design?
> : . Is there a way to make it so users do not have to login to every
> server?
> : A "one-login-fits-all" solution.
> :
> :
> : Again, any assistance is much appreciated,
> :
> : Michael Ahearn
> : michael.ahearn@stockell.com
> :
> :
>
>