Exchange 2007 - Owa and integrated authentication   

Hi,

Currently i have set OWA to use Form based authentican and not I have a 
request to use integrated authentication so that the calender shows up 
without logging in - in Sharepoint.
Are there any security concerns and/or what impact will this have on 
external users?

Thanks

date: Thu, 17 Apr 2008 08:32:54 +0100   author:   IT

Re: Exchange 2007 - Owa and integrated authentication   

"IT"  wrote in message 
news:e8kVB1FoIHA.3960@TK2MSFTNGP02.phx.gbl...
> Hi,
>
> Currently i have set OWA to use Form based authentican and not I have a 
> request to use integrated authentication so that the calender shows up 
> without logging in - in Sharepoint.
> Are there any security concerns and/or what impact will this have on 
> external users?
>
> Thanks

There are no security concerns as far as the credentials are concerned, 
since in IA they are encrypted.  If you continue to use SSL, then the 
message contents will be, too.  The only authentication method that causes 
some concern is using Basic Auth without also using SSL, since the 
credentials are transmitted Base64 encoded, but not actually encrypted.

Lee.

-- 
_______________________________________

Outlook Web Access for PDA, OWA For WAP:
www.leederbyshire.com
________________________________________

date: Thu, 17 Apr 2008 10:46:03 +0100   author:   Lee Derbyshire [MVP] email a@t leederbyshire d.0.t c.0.m