Mirket OWA Agent

The first steps are to prepare the installation files on the server where Exchange is located.

Download OWA agent via manage-download buton on OWA rule page.

For using multi-factor authentication in Outlook Web Access (OWA) accesses, the following steps need to be performed within the Exchange server:

Figure 2.25

Then copy everything except Bin folder into C:\ProgramFiles\Microsoft\ExchangeServer\V15\ClientAccess\Owa.

Then copy MultiFactor.IIS.Adapter.dll and Newtonsoft.Json.dll files in Bin folder to C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\Owa\Bin directory.

Backup the the web.config file inside the C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\Owa

The web.config file inside the C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\Owa directory is opened.

Add the Multifactor module inside the tag as shown below:

  • First change the <modules> with <modules runAllManagedModulesForAllRequests="false">

  • ·Secondly , The Multifactor module should be added within the modules tag, as seen below:

    --> <add type="MirketOwa.IIS.Agent.Owa.Module, MirketOwa.IIS.Agent" name="MFA" />

    </modules>

  • · Three keys should be added within the appsettings tag.

    * mirket:api-url => Mirket URL related.

    * mirket:disaster-scenario-bypass => In a disaster scenario, it checks whether a bypass should occur when Mirket cannot be reached (true, false). False is recommended if provider is Approve/Deny.

* mirket:api-key=> Mirket API key .

<appSettings>

--> <add key="mirket:api-url" value="https://admin.mirketsecurity.com" />

--> <add key="mirket:disaster-scenario-bypass" value="false" /> --> <add key="mirket:api-key" value="xxx-xxx-xxx" />

</appSettings>

After the above changes are made, stop and start the OWA backend and frontend via IIS.

Figure 2.26

If you wish to disable Mirket on OWA, the following steps should be taken.

  • · The following line added to the modules tag is commented out (<!-- comment line -->) or removed. Afterward, the OWA application (Figure 2.26) is restarted via IIS.

<modules runAllManagedModulesForAllRequests="false">

<!-- <add type="MirketOwa.IIS.Agent.Owa.Module, MirketOwa.IIS.Agent" name="MFA" / > -->

</modules>

OWA Rules

OWA Logging

Last updated