Template:Directory Services Authentication - Revision history

Bmeyn at 13:37, 23 April 2021

2021-04-23T13:37:50Z

Bmeyn at 13:25, 23 April 2021

2021-04-23T13:25:19Z

Ltalaschus at 07:09, 23 April 2021

2021-04-23T07:09:08Z

Ltalaschus: /* Authentication */

2021-04-23T06:56:24Z

Authentication

Ltalaschus: /* Authentication */

2021-04-22T15:08:47Z

Authentication

Ltalaschus: /* Authentication */

2021-04-22T09:46:05Z

Authentication

Ltalaschus at 09:37, 22 April 2021

2021-04-22T09:37:51Z

Ltalaschus: Created page with "=== Authentication === *'''Method'''
Here you can choose how users that have been synchronized from {{{1|directory service}}} will be authenticated.
When choosing t..."

2021-04-22T09:15:31Z

Created page with "=== Authentication === *'''Method'''<br/>Here you can choose how users that have been synchronized from {{{1|directory service}}} will be authenticated.<br /> When choosing t..."

New page

=== Authentication ===

*'''Method'''<br/>Here you can choose how users that have been synchronized from {{{1|directory service}}} will be authenticated.<br /> When choosing the option ''Kerberos / NTLM'', users log in using the MailStore Client, respectively the Outlook Add-In or Web Access, and the credentials are passed to MailStore Server that verifies them against the configured directory service. When choosing the option ''AD FS (Open ID Connect)'' the users will be redirected to the AD FS login page and authenticate themselves there. The policies configured in AD FS are taking affect for the MailStore login as well.

::When selecting ''AD FS (Open ID Connect)'', you have to configure your AD FS [[Template:Setup_Active_Directory_Federation_Services|according to our setup guide]]. Afterwards you have to configure the following settings in MailStore:
:*'''Discovery URI:''' The Discovery URI is the URI where the AD FS are reachable. Typically this is the host name of the AD FS server followed by the path ''/adfs'', e.g. ''<nowiki>https://adfs.example.com/adfs</nowiki>''. The certificate used by the AD FS must be trusted.
:*'''Client ID:''' The ''Client Identifier'' of the ''Application Group'' that has been created in AD FS.
:*'''Redirect-URI:''' The ''Redirect-URI'' must match the ''Redirect-URI'' that has been configured in the ''Application Group''.
<noinclude>
[[de:Vorlage:Verzeichnisdienste_Authentifizierung]]
[[en:Template:Directory_Services_Authentication]]
</noinclude>

@@ Line 2: / Line 2: @@
 *'''Method'''<br/>Here you can choose how users that have been synchronized from {{{1|directory service}}} will be authenticated.
-** ''{{#ifeq: {{{1|Active Directory}}}|Active Directory|Kerberos / NTLM|LDAP}}''<br/>With this option, users can log on directly to MailStore Server with their {{{1|directory service}}} credentials. The provided credentials are relayed to {{{1|the directory service}}} for verification.
+** ''{{#ifeq: {{{1|Active Directory}}}|Active Directory|Kerberos / NTLM|LDAP}}''<br/>With this option, users can log on directly to MailStore Server with their {{{1|directory service}}} credentials. The provided credentials are relayed by MailStore Server to {{{1|the directory service}}} for verification.
 ** ''AD FS (OpenID Connect)''<br/>If your company employs Active Directory Federation Services (AD&nbsp;FS), users can also log on to MailStore Server using OpenID Connect through AD&nbsp;FS. For this, you have to configure your AD&nbsp;FS [[Setup_Active_Directory_Federation_Services|according to our setup guide]] and enter the following parameters in MailStore Server afterwards.
 *** '''Discovery URI'''<br/>The URI by which the AD&nbsp;FS are reachable. Typically, this is the fully qualified domain name of the AD&nbsp;FS server followed by the path ''/adfs'', e.g. ''<nowiki>https://adfs.example.com/adfs</nowiki>''. The certificate used by the AD&nbsp;FS must be trusted.

@@ Line 1: / Line 1: @@
 === Authentication ===
-*'''Method'''<br/>Here you can choose how users that have been synchronized from {{{1|directory service}}} will be authenticated.<br /> When choosing the option ''{{#ifeq: {{{1|Active Directory}}}|Active Directory|Kerberos / NTLM|LDAP}}'', users log in using the MailStore Client, respectively the Outlook Add-In or Web Access, and the credentials are passed to MailStore Server that verifies them against the configured directory service. When choosing the option ''AD FS (Open ID Connect)'' the users will be redirected to the AD FS login page and authenticate themselves there. The policies configured in AD FS are taking affect for the MailStore login as well.
+*'''Method'''<br/>Here you can choose how users that have been synchronized from {{{1|directory service}}} will be authenticated.<br /> When choosing the option ''{{#ifeq: {{{1|Active Directory}}}|Active Directory|Kerberos / NTLM|LDAP}}'', users log in using the MailStore Client, respectively the Outlook Add-In or Web Access, and the credentials are passed to MailStore Server that verifies them against the configured directory service. When choosing the option ''AD FS (Open ID Connect)'' the users will be redirected to the AD FS login page and authenticate themselves there. The policies configured in AD FS are taking affect for the MailStore Server login as well.<br /> When using Open ID Connect to authenticate users, accessing the archive via IMAP is not possible for technical reasons.
 ::When selecting ''AD FS (Open ID Connect)'', you have to configure your AD FS [[Setup_Active_Directory_Federation_Services|according to our setup guide]]. Afterwards you have to configure the following settings in MailStore Server:
 :*'''Discovery URI:''' The Discovery URI is the URI where the AD FS are reachable. Typically this is the host name of the AD FS server followed by the path ''/adfs'', e.g. ''<nowiki>https://adfs.example.com/adfs</nowiki>''. The certificate used by the AD FS must be trusted.

@@ Line 2: / Line 2: @@
 *'''Method'''<br/>Here you can choose how users that have been synchronized from {{{1|directory service}}} will be authenticated.<br /> When choosing the option ''{{#ifeq: {{{1|Active Directory}}}|Active Directory|Kerberos / NTLM|LDAP}}'', users log in using the MailStore Client, respectively the Outlook Add-In or Web Access, and the credentials are passed to MailStore Server that verifies them against the configured directory service. When choosing the option ''AD FS (Open ID Connect)'' the users will be redirected to the AD FS login page and authenticate themselves there. The policies configured in AD FS are taking affect for the MailStore login as well.
-::When selecting ''AD FS (Open ID Connect)'', you have to configure your AD FS [[Setup_Active_Directory_Federation_Services|according to our setup guide]]. Afterwards you have to configure the following settings in MailStore:
+::When selecting ''AD FS (Open ID Connect)'', you have to configure your AD FS [[Setup_Active_Directory_Federation_Services|according to our setup guide]]. Afterwards you have to configure the following settings in MailStore Server:
 :*'''Discovery URI:''' The Discovery URI is the URI where the AD FS are reachable. Typically this is the host name of the AD FS server followed by the path ''/adfs'', e.g. ''<nowiki>https://adfs.example.com/adfs</nowiki>''. The certificate used by the AD FS must be trusted.
-:*'''Client ID:''' The ''Client Identifier'' of the ''Application Group'' that has been created in AD FS.
+:*'''Client ID:''' The ''Client Identifier'' of the ''Application Group'' that has been created for MailStore Server in AD FS.
 :*'''Redirect-URI:''' The ''Redirect-URI'' must match the ''Redirect-URI'' that has been configured in the ''Application Group''.
 <noinclude>

Template:Directory Services Authentication - Revision history

Bmeyn at 13:37, 23 April 2021

Bmeyn at 13:25, 23 April 2021

Ltalaschus at 07:09, 23 April 2021

Ltalaschus: /* Authentication */

Ltalaschus: /* Authentication */

Ltalaschus: /* Authentication */

Ltalaschus at 09:37, 22 April 2021

Ltalaschus: Created page with "=== Authentication === *'''Method'''Here you can choose how users that have been synchronized from {{{1|directory service}}} will be authenticated. When choosing t..."

Ltalaschus: Created page with "=== Authentication === *'''Method'''
Here you can choose how users that have been synchronized from {{{1|directory service}}} will be authenticated.
When choosing t..."