MOSS 2007 and ISA 2006

Some more detail would also be great :) Are you looking at this from the perspective of using ISA2006 with MOSS but you want assistance with setting up the MOSS authentication/delegation? OR is this a question on setting up ISA to control MOSS access through delegation?

Full details on the requirement/environment please

Ha, good point Keith,

One of the business requirments we have is to SmartCard enable SharePoint, and have a user provisioning process.  I know if we use ISA, its kerberos constrained delegation, which seems to be a lot of overhead / pain / compatability issues with office features, etc.  We are running a medium farm, two web front ends, an app server and a sql cluster.

What are the pros of using ISA for a gateway to handle certificates and authentication?  What do we stand to gain by setting up an ISA solution, and if we don't use ISA, what's another way to accommodate the business requirement?

Thanks keith!

Welcome.

I have to provide a similar situation for both single sign-on employees to our CRM & ERP systems plus non-employee access to our internal/extranet portals.

The approach we took was to use two active directories - one in the DMZ and obviously our normal internal AD. The tools we used were the IAG2007 and ISA2006 and a full PKI/Certificate environment. This was supplemented by the use of Silver hard tokens and RADIUS authentication.

You can find details on both the ISA/IAG products here on the Forefront - Edge section on the MS web site.
http://www.microsoft.com/forefront/edgesecurity/default.mspx

Have a read first please on the processes and principles so we can ensure that the terms and names we use are consistent. I think you will find everything you need here but if we need to go into it in depth it is a nightmare if each of us has a different understanding of a word or phrase.

Keith