与SharePoint验证iTunes上 [英] MobileIron with sharepoint for authentication

问题描述

我们有没有内置功能来验证和授权的移动铁用户到SharePoint？

Do we have any in-built feature to authenticate and authorize a user from mobile iron to SharePoint?

用户将通过手机铁现在他必须登录到SharePoint进行身份验证的无缝连接。

User will be authenticated via mobile iron now he must be login to SharePoint seamlessly.

推荐答案

使用MobileIron的，您可以使用Kerberos约束Delegetion（KCD）的无缝身份验证背后的MobileIron的哨兵系统/访问。目前可通过从iTunes上的支持接入专用的文件，其中这些东西进行详细说明。

With MobileIron you can use Kerberos Constrained Delegetion (KCD) for seamless authentication to a system behind the MobileIron Sentry / accessed through the Sentry. There is a dedicated document available through support access from MobileIron where this stuff is explained in detail.

在这一点上我只点出了整个过程与MobileIron的的Web @工作浏览器来访问SharePoint：

At this point I'll only point out the overall process to access SharePoint with the MobileIron Web@Work browser:

• 您必须通过部署MobileIron的用户的用户证书
  验证。


• 你也需要设置为KCD SharePoint网站/
  Web服务器：活动目录（AD）ServíceAccount获得
  Kerberos的Ticktes从域控制器（DC），配置服务
  您要访问的ressource名PRINICIPAL和
  为服务帐户并验证委派;的ressource。


• 配置与服务定义一个网络@工作config中KCD访问专用SharePoint站点。

如果所有到位接入/认证过程如下：
当设备连接到岗哨访问配置SharePoint网站/网络服务器它与用户证书的认证哨兵并发送请求到的ressource。哨兵去到密钥分发中心（KDC），这是在一个AD DC服务，请求Kerberos票据与服务帐户的用户和重视这个票转发web请求到SharePoint Web服务器。

If all is in place the access / authentication process is as follows: When the device connects to the sentry to access the configured Sharepoint Site / Webserver it authenticates with the user certificate to the Sentry and sends the requests to the ressource. The Sentry goes to to the Key Distribution Center (KDC), that's a service on an AD DC, requests a Kerberos ticket for the user with the service account and attaches this ticket to the forwarded web request to the SharePoint web server.

正如你所看到这不是很简单的设置它，但工作正常，用户会爱你; - ）

As you can see it's not very simple to set it up but works fine and the users will love you ;-)

这篇关于与SharePoint验证iTunes上的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！