Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Enable WS-Federation on OWA

Log on to Exchange server using domain admin credentials.

Run Run Exchange Management Shell as administrator

Run the following script in the Exchange Management Shell 

./setup-owa-mfa.ps1 -exchangeFQDN 'your Exchange FQDN' -dualshieldFQDN 'your DualShield SSO FQDN' -dualshieldPort 'your DualShield SSO Port' -idpCertFile 'your DualShield IdP cert file' -appname 'application name' -spname 'service provider name'


Parameter

Remarks

-exchangeFQDN the external full qualified domain name of your Exchange server, e.g. mail.acme.org
-dualshieldFQDN the external full qualified domain name of your DualShield SSO server, e.g. dualshield.acme.org
-dualshieldPort the external port number of your DualShield SSO server, e.g. 8074
-idpCertFile the full path file name of your DualShield IdP certificate, e.g c:\certs\dualshieldidp.crt
-appnamethe application name in DualShield for OWA
-spnamethe service provider name in DualShield for OWA


Example:

Import IdP Certificate

...