Forum Discussion

Koni_51721's avatar
Mar 08, 2013

Access from MS Office to Sharepoint 2010/2013 and NTLM authentication

Has anybody experience with Sharepoint 2010 or 2010 and MS Office secured with BigIP APM/ASM?

 

Our customers need to access Sharepoint 2010 and 2013. With the current reverse proxy and authentication product (not from F5), we have some troubles when we browse to MS Office documents and open them to edit/check-out/check-in.

 

Does this communication between MS Office and Sharepoint work well with the BigIP APM/ASM?

 

Is there a possibility to use NTLM for Sharepoint Authentication. I know that BigIP APM 11.3 does support NTLM for Exchange Access, but does this work also for Sharepoint?

 

Thanks

 

Koni

 

 

2 Replies

  • Yes. BIG-IP APM will support any of the authentication methods supported by SharePoint. NTLM, Kerberos, Basic / HTTP, and even SAML / Federation. It will even provide Single Sign On for your applications.

     

     

    Could you describe the issue that you see with the office applications? It sounds like the Office Client Authentication issue which is very common to SharePoint / Office Environments. There are a couple work arounds, but they are not secure.
  • Posted By Koni on 03/08/2013 01:17 PM

     

    Has anybody experience with Sharepoint 2010 or 2010 and MS Office secured with BigIP APM/ASM?

     

    Our customers need to access Sharepoint 2010 and 2013. With the current reverse proxy and authentication product (not from F5), we have some troubles when we browse to MS Office documents and open them to edit/check-out/check-in.

     

    Does this communication between MS Office and Sharepoint work well with the BigIP APM/ASM?

     

    Is there a possibility to use NTLM for Sharepoint Authentication. I know that BigIP APM 11.3 does support NTLM for Exchange Access, but does this work also for Sharepoint?

     

    Thanks

     

    Koni

     

     

     

    F5 APM does not have issues with opening and editing Office documents from within Sharepoint interface. You can use NTLM authentication to APM on the front end, but then you will need to setup Kerberos Constrained Delegation on the backened between F5 and Sharepoint, as NTLM as authentication method cannot be proxied - user password is never captured. Or you can have users authentiate to APM using forms-based authentication and APM can perform NTLM-based SSO to the Sharepoint site on the backend.