Create an Microsoft IIS IWA application

During this task we will create the required Microsoft IIS IWA application in Access Gateway.

  1. Sign in to the Access Gateway Admin UI console.
  2. Click the Applications tab.

  3. Click +Add to add a new application.

  4. Select Microsoft IIS IWA from the left column menu, and click Create.
    Info

    Note

    If the Microsoft IIS, OWA, or Sharepoint IWA applications are disabled, ensure that there is a valid Kerberos service configured in settings.

  5. If required, expand the Essentials pane and enter:
    FieldValue
    LabelThe name of the application, as shown in your Okta Tenant.
    For example:Microsoft IIS Application
    Public DomainThe externally facing URL of the application.
    For example: https://iis.idaasgateway.net
    Protected Web ResourceFully qualified URL to the Microsoft backing application.
    GroupThe group containing users who can access the application.
  6. Important Note

    Important

    While optional, Okta recommends that all applications include certificates.
    See About Access Gateway certificates for general information about certificate.
    See Certificate management tasks for a general task flow for obtaining and assigning certificates.  

  7. Expand the Certificates tab.
    Note

    Note

    By default a wildcard self signed certificate is created and assigned to the application when the application is initially created.

  8. Optional. Click Generate self-signed certificate

    A self-signed certificate is created and automatically assigned to the application.
  9. Optional. Select an existing certificate from the list of provided certificates.
    Use the Search field to narrow the set of certificates by common name.
    Use the page forward (>)and backward(<) arrows to navigate through the list of available certificates.

  10. Click Next
  11. In the Application pane, enter:
    FieldValue
    Kerberos RealmEnter the name of the associated realm
  12. Click Next.
  13. In the Attributes pane:
    1. Click Add attribute to add an attribute what corresponds to sAMAccountName.

    2. Verify he following:
      FieldValue

      Data Source

      IDP

      Field

      IDP attribute that correlates with the users sAMAccountName

      Type

      Header

      nameiwa_username
    3. Click Save.
  14. Click Done.

The application is added and the Application list page is displayed.