clhoa (clhoa) asked a question.
Setup on-premise OWA to require login via OKTA?
Is it possible to setup on-premise OWA to require login via OKTA?
- adina.enache1.5163241265230361E12 (Vendor Management)
Hi Mike,
As far as a straight deployment guide, Okta doesn't offer an out of the box solution for this kind of deployments, there may be scattered information on this, like our question on the support portal for ex. : https://support.okta.com/help/s/question/0D50Z00008G7UwpSAF/has-anyone-configured-their-outlook-web-access-owa-to-be-authenticated-by-okta
As far as I know about this sort of deployment, they may be done via SAML with a custom SAML integration, I saw an article on MS that helped out on this in previous cases:
this is done with the federation metadata : federationmetadata/saml20/federationmetadata.xml
The username format I saw previously as persistent with the the Immutable Id sent as the value.
The WS-Trust template may help in a ws-trust exchange : https://help.okta.com/en/prod/Content/Topics/Apps/Apps_Configure_Okta%20Template_WS_Federation.htm?cshid=ext_Apps_Configure_Okta_Template_WS_Federation with the following metadata ex.: https://nexus.microsoftonline-p.com/federationmetadata/saml20/federationmetadata.xml
Also I read about SWA integrations, direct bookmarking of OWA portal via Okta plugin credential submissions.
The deployments although and the complex side of this,is mostly handled by our Professional Services, we handle the support and troubleshooting side of ongoing deployments.
Have a great day.
Expand Post - mike.davie1.5312945692819849E12 (Customer First Programs)
Hello!
Thanks for posting your inquiry in Okta Community Portal.
If you really liked your answer, please help readers find it by marking it the best answer. Hover over the answer and click "Best Answer."
Thank you,
Mike Davie
Expand Post
This question is closed.
Hi Mike,
As far as a straight deployment guide, Okta doesn't offer an out of the box solution for this kind of deployments, there may be scattered information on this, like our question on the support portal for ex. : https://support.okta.com/help/s/question/0D50Z00008G7UwpSAF/has-anyone-configured-their-outlook-web-access-owa-to-be-authenticated-by-okta
As far as I know about this sort of deployment, they may be done via SAML with a custom SAML integration, I saw an article on MS that helped out on this in previous cases:
https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-federation-saml-idp
this is done with the federation metadata : federationmetadata/saml20/federationmetadata.xml
The username format I saw previously as persistent with the the Immutable Id sent as the value.
The WS-Trust template may help in a ws-trust exchange : https://help.okta.com/en/prod/Content/Topics/Apps/Apps_Configure_Okta%20Template_WS_Federation.htm?cshid=ext_Apps_Configure_Okta_Template_WS_Federation with the following metadata ex.: https://nexus.microsoftonline-p.com/federationmetadata/saml20/federationmetadata.xml
Also I read about SWA integrations, direct bookmarking of OWA portal via Okta plugin credential submissions.
The deployments although and the complex side of this,is mostly handled by our Professional Services, we handle the support and troubleshooting side of ongoing deployments.
Have a great day.