MediaGateway must be installed to use the connector for Microsoft Exchange. You can find instructions on how to do this here.
Kerberos authentication for the Microsoft Exchange connector can be configured in the data source settings in the "Integration" module. Click here to learn how to create a new data source.
In the data source configuration, under "Authentication," you will find the setting "Kerberos (only for integrated authentication)."
Kerberos uses the current Windows user to determine the login credentials and automatically logs the user in. Please note the following basic requirements for successful authentication with Kerberos:
-
The Intrexx Portal must be operated with integrated authentication.
-
The users from your Active Directory must be created in Intrexx accordingly. You can also easily import users. Please make sure that at least one user is a member of the Administrators group so that you can continue to administer the system.
-
The server on which MediaGateway is installed requires the "Delegation" group policy.
-
All clients and servers must be members of the same domain.
-
In Internet Explorer, under the security settings for the zone you are using, the "Automatic logon with current username and password" option must be selected for user authentication. In addition, the "Enable Integrated Windows Authentication" option must be selected in the advanced settings.
-
With Kerberos authentication, you have a real Set up single sign-on for your users to access the Exchange server and use built-in Windows authentication.
If a user cannot be authenticated, session-based login is automatically enabled.
Service Principal Name
A Service Principal Name (SPN) must be specified for successful authentication. The SPN contains information about the service for which a Kerberos ticket is to be generated. This ticket is required for the MediaGateway server. An SPN is suggested here, but in practice it will need to be adjusted depending on your system environment.
The SPN is typically structured as follows: host/<computer DNS name>@<KERBEROS_REALM>. In this case, the computer's DNS name corresponds to the fully qualified host name (e.g., mycomputer.mycompany.de). KERBEROS_REALM is usually the domain name in uppercase (e.g., MYCOMPANY.DE). The SPN with the sample data would therefore be as follows: host/meinrechner.meinefirma.de@MEINEFIRMA.DE.
You can find a description of all the remaining steps in a Microsoft Exchange data source configuration here. Please also note the information under "Login Credentials for the Exchange Server."