Forum Discussion

Thai_Lam's avatar
Thai_Lam
Brass Contributor
Jun 17, 2019
Solved

OWA forms-based authentication with basic authentication disabled

Hi everyone,

I am running form based authentication. For some concern, i would like to disable basic authentication


get-OwaVirtualDirectory "owa (Default Web Site)" |fl *auth*
ClientAuthCleanupLevel : High
InternalAuthenticationMethods : {Basic, Fba}
BasicAuthentication : True WindowsAuthentication : False
DigestAuthentication : False FormsAuthentication : True
LiveIdAuthentication : False AdfsAuthentication : False
OAuthAuthentication : False

ExternalAuthenticationMethods : {Fba}

 

Note the "InternalAuthenticationMethods" is Basic and Fba.


set-OwaVirtualDirectory "owa (Default Web Site)" -BasicAuthentication $false
get-OwaVirtualDirectory "owa (Default Web Site)" |fl InternalAuthenticationMethods
InternalAuthenticationMethods : {}

 

with just setting the "BasicAuthentication" to $false it turns off the form based too. So i tried to enabled the form based again.

 

 

set-OwaVirtualDirectory "owa (Default Web Site)" -FormsAuthentication $true
ClientAuthCleanupLevel : High
InternalAuthenticationMethods : {Basic, Fba}
BasicAuthentication : True
WindowsAuthentication : False
DigestAuthentication : False
FormsAuthentication : True
LiveIdAuthentication : False
AdfsAuthentication : False
OAuthAuthentication : False
ExternalAuthenticationMethods : {Fba}

The basic authentication was automatically turn on by itself again. So i was thinking the form based required the basic authentication. The information on the internet is kind of scarce. Does anyone has any experience on this? Also note the "ExternalAuthenticationMethods" is {Fba} without Basic? Thanks everyone!

4 Replies

    • Thai_Lam's avatar
      Thai_Lam
      Brass Contributor

      Greg Taylor - EXCHANGE Thank you! Can i also check ExternalAuthenticationMethods : {Fba}, what does this do? Because it seems different then the other .

       

      -ExternalAuthenticationMethods is using string base instead of -FormsAuthentication $true or $false and it accepts just only "Fba".

      set-OwaVirtualDirectory "owa (Default Web Site)" -ExternalAuthenticationMethods fba

       

       

      • mderooij's avatar
        mderooij
        MVP

        The individual settings enable (or disable) the respective authentication method on the vdir. ExternalAuthenticationMethods and InternalAuthenticationMethods determine allowed authentication methods when connecting internally or externally. Only methods can be selected which are enabled on the vdir. It's a multi-value, allowing you to specify more than one method (thus displayed differently in output)

Resources