SSO for Hosted Exchange

[Cantor, Scott]

On 3/18/14, 1:06 PM, "Kevin Pequeneza" <Kevin.Pequeneza at agmn.ca> wrote:

>I was wondering if your software could be used for SSO in a hosted
>exchange environment. We would like to host Exchange for multiple tenants
>and have their local AD credentials authenticate to our hosted exchange
>server to eliminate the need for multiple log ons and passwords.

If you deployed SAML in whatever form such that the access to the mail
interface (which is not Exchange, that's a mail *server*; perhaps you mean
OWS?) was based on SAML federated access, then the IdP half can be
anywhere and authenticate to basically anything. But your customers
probably don't all have SAML IdPs, so unless you're prepared to run them,
that creates a limitation.

On the SP side, Shibboleth per se isn't extraordinarily well suited to
deploy with Outlook Web Service, but I believe it's possible, at least in
some versions of OWS. And there's always ADFS, so you could look at using
that as the SP at least.

There is no yes/no answer to these kinds of questions, really, and if the
question is "will this just work with little effort and without a lot of
skill ramp up?", it's definitely no.

-- Scott