Exchange 2010 OWA Forms Based Login via Exchange Web Services Managed API

Posted on 2011-05-09
Last Modified: 2012-05-11
How do I/Is it possible, to authenticate to OWA 2010 using FBA, and receive the sessionid and cadata cookies back?

All I can find on the matter is articles related to owa 2003 and 2007, most suggesting to perform a POST directly to owaauth.dll. I have tried to adjust the code to work with 2010, by pointing to /owa/auth.owa, but the closest I get is a 440 Login Timeout error. Logging in through the client works fine.

Using EWS Managed API, I can authenticate and get data, but the CookieContainer object is empty unless I run a query first. The cookie it returns after doing so is named "exchangecookie" and does not help me so much.

Am I missing something? or is this just not done in 2010 now?

Question by:hrappapo
    LVL 31

    Expert Comment

    You only had to do that with WebDAV when FBA was enabled on the Exchange VDir.  EWS POSTs to the EWS VDir, and I don't think it's possible to enable FBA on it.  Or, at least, there is no good reason to ever do so.

    Author Comment

    The reason to do so, is to create a single sign on from our external web app to Outlook Web App. I can do this via SharePoint Web Services to create an FBA ticket via the cookies in the response, and I am attempting something similar with exchange.
    LVL 31

    Accepted Solution

    Oh, right.  It's really nothing to do with EWS Managed API, then, unless you are writing your own Exchange application, rather that actually trying to log in to OWA.  Or are you doing what they call 'scraping' the OWA HTML source that is returned to the client?

    If you just want to log in to OWA using existing credentials, then any examples you found for OWA 2007 should have worked with OWA 2010 - they are /extremely/ similar below the surface.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Learn more about how the humble email signature can be used as more than just an electronic business card. When used correctly, a signature can easily be tailored for different purposes by different departments within an organization.
    Granting full access permission allows users to access mailboxes present in their database. By giving full access permission one can open and read the content of any mailbox but cannot send emails from that mailbox.
    In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
    In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now