PWA 2007

[Mark Pfeifer]

Can anyone let me know how to make PWA 2007 have anonymous access? We are
trying to bundle Project Server and SharePoint 2007 into our single sign-on
environment. For SharePoint, we enforce anonymous iis settings and the sso
provider sends the credentials. PWA seems to know who the user is but
images and other associate files are blocked and do not display.

Basically, we need to know how to get PWA to not use the IWA or another
integrated approach and allow the windows token and authenticated user into
PWA.

TIA
Mark

 

[Ben Howard]

Hi Mark,
I don't think you can do it. You need to be named user to be able to access
the data in Project. Perhaps the easiest technical way for you to do this is
to use the ADSync feature in 2007 an add all the resoures to a relevant "read
only" group. Note each user will then need a PS2007 CAL, potentially
expensive. What is the business issue you are trying to solve?

 

[Manmeet Chaudhari]

Hi Mark
Project Web Access requires one of the 2 authentication mechanism
1. Windows Authentication
2. Forms Authentication

SharePoint does offer anonymous access but PWA does not.
You can refer to
http://technet2.microsoft.com/Offic...0f94-4429-84ba-62581ea6a7c61033.mspx?mfr=true


So for single sign on you can use either windows or forms authentication.
Typically for intranet kind of applications windows authentication is used.
For extranet and public access it is better to use Forms authentication.


Manmeet Chaudhari
EPM Consultant

 

[Mark]

Ben -

The business issue is single signon-on to various web and client/
server applications (via citrix). We need the ability to log into the
portal environment and be able to move about various applications w/o
re-authenticating. Not all of the products are Microsoft apps.

The security server uses AD as the repository and so does SharePoint
and Project. However, we use a 3rd party security server which grabs
the client certificate, determines the user and then impersonates the
user for SharePoint.

Does that make sense?
Mark

 

[Mark]

Manmeet -

I am not really wanting anonymous access as we will know the windows
user. The RSA product intercepts the URL, grabs a client cert,
determines the user and then creates a windows token so SharePoint
knows who the user is. The anonymous setting simply bypasses the IWA
logon approach. This works fine for SharePoint and the basic project
server. However, when we get to the 2nd level of security for project
server, it doesn't seem to like the token for some reason.

Does that make sense?
Mark