Step1: configure Exchange to use basic authentication
1. Start the Exchange Management Console.
2. In the Exchange Management Console, expand Server Configuration, and then click Client Access.
3. Select your Client Access server, and then on the Outlook Web Access (or Outlook Web App) tab, select owa (Default Web Site).
4. In the Actions pane, under owa (Default Web Site), click Properties.
5. On the Authentication tab, click Use one or more of the following standard authentication methods, make sure that only the Basic authentication (password is sent in clear text) check box is selected, and then click OK.
Step2: publish Outlook Web Access on a Forefront UAG portal
Right Click on HTTPS Connections, Click New Trunk, Click Next
Select Portal Trunk and Publish Exchange Applications via portal, Click Next
Type the name of the trunk, type the name of the public host name i.e. FQDN of webmail. Click Next
Click Add on the Authentication page, Type the name of the domain Controller, Click Ok.
Type the service account which will talk to DC from UAG, Click Ok
Select the DC, Click Select. Leave rest of the settings as is. Click Next
Select the certificate which is issued by public certificate authority, exported from mail server and imported to UAG server. Click Next. Don’t worry about certificate screen shot. this is a test environment.
Select Use Forefront UAG Access Policies, Click Next. Don’t worry about the certificate shown in above screen shot. This is a test environment. In production environment, common name of the certificate will be webmail.xman.com.au
Select Default and Click next
Select OWA, Anywhere and ActiveSync, Select Exchange version from drop down menu, Click Next
Type the name of the application, Click next
Select default and click next
On the Deploying an Application page of the wizard, choose whether to publish a single Exchange Client Access server or a farm of load-balanced Exchange Client Access servers.
Click Configure an application server, Click Next
On the Web Servers page of the wizard:
In the Addresses list, enter the IP address or host name of the Client Access server.
In the Public host name box, enter the public host name for this application. The public host name must match the FQDN in the certificate. The public host name can be the same as the public host name of the trunk, if required.
On the Authentication page of the wizard, select an authentication server to authenticate users to the application, and click 401 request.
On the Outlook Anywhere Page, Select basic Authentication, Click next
On the Portal Link page of the wizard, configure the portal link for the application.
If you are publishing Exchange 2013 or Exchange 2010 and OWA is not the initial portal application, make sure that the Open in a new window check box is selected.
On the Authorization page of the wizard, select which users are authorized to access this application.
On the Completing the Add Application Wizard page of the wizard, click Finish.
Once configured, you will see the following screen.
If you want to define the Outlook Web Access application as the portal home page, in the Forefront UAG Management console, in the Initial application list, click the application that you added in this procedure.
To apply the Outlook Web Access look and feel to the Forefront UAG user interaction pages, in the Forefront UAG Management console, next to Configure trunk settings, click Configure, click the Authentication tab, and then select the Apply an Outlook Web Access look and feel check box. Confirm the changes to the logon settings, and then click OK.
On the toolbar of the Forefront UAG Management console, click the Activate configuration icon, and then on the Activate Configuration dialog box, click Activate.