Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2

Topic Last Modified: 2012-07-23

You can configure forms-based authentication and the sign-in prompt that's used by forms-based authentication on an Outlook Web App virtual directory on a Client Access server.

Forms-based authentication gives you three options for the default sign-in format. These options change only the text on the Outlook Web App sign-in page. They don't cause a particular format to be required. The user can use any of the standard sign-in formats regardless of the text on the page.

Looking for other management tasks related to forms-based authentication? Check out Setting Up Forms-Based Authentication for Outlook Web App.

Use the EMC to configure forms-based authentication for Outlook Web App

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Outlook Web App virtual directories" entry in the Client Access Permissions topic.

  1. In the console tree, select Server Configuration, select Client Access, select the server that hosts the Outlook Web App virtual directory, and then click the Outlook Web App tab.

  2. In the work pane, select the virtual directory that you want to configure to use forms-based authentication, and then click Properties.

  3. Click the Authentication tab.

  4. Select Use forms-based authentication.

  5. Select the sign-in format that you want to use.

    Note:
    You must restart Internet Information Services (IIS) by using the command iisreset/noforce for these changes to take effect.

Use the Shell to configure forms-based authentication for Outlook Web App

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Outlook Web App virtual directories" entry in the Client Access Permissions topic.

This example configures forms-based authentication on an Outlook Web App virtual directory in the default IIS Web site on the local Exchange server.

Copy Code
Set-owavirtualdirectory -identity "owa (default web site)" -FormsAuthentication:$true

Use the Shell to configure the default sign-in method used by forms-based authentication

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Outlook Web App virtual directories" entry in the Client Access Permissions topic.

This example configures a full domain sign-in format,

Copy Code
Set-owavirtualdirectory -identity "owa (default web site)" -LogonFormat FullDomain

This example configures a UPN sign-in format.

Copy Code
Set-owavirtualdirectory -identity "owa (default web site)" -LogonFormat PrincipalName

This example configures a user name sign-in format and sets the default domain.

Copy Code
Set-owavirtualdirectory -identity "owa (default web site)" -LogonFormat UserName -DefaultDomain "<domain name>"
Note:
You must restart IIS by using the command iisreset/noforce for these changes to take effect.

For more information about syntax and parameters, see Set-OwaVirtualDirectory.

Other Tasks