Hello guys,

I have published Exchange 2013 via TMG 2010 with pre-authentication. Since this is the first time I am doing it- I want to ask experts for the explanations:).

When I configure Active Sync on mobile, I just type the password and  it's starts syncing after 20 sec.

When I use browser and trying to login using TMG logon screen, after I enter credentials (if they were not wrong), I get exchange 2013 logon screen ( because my password was checked by DC's).

I have customized TMG tamplate to Exchange 2013 tamplate, but it did not help- I have two logon screens.

Is it possible to configure TMG for showing only one logon screen ( without disabling pre-authentication) ? Does it work this way?

Did I miss something?

• Edited by Exchange Admin 365 Sunday, April 05, 2015 3:35 PM

Hi,

Please try to enable FBA for external and internal OWA 2010 users by the methods in the blog below.

 There are several ways to accomplish this:

• Have internal users pointed to the internal interface of the Forefront TMG and utilize the forms-based authentication logon page offered by Forefront TMG. 
• Deploy Forefront UAG instead of Forefront TMG. Forefront UAG allows you to have FBA enabled on both the Exchange 2010 Client Access Servers and on the Forefront UAG solution itself. 
• Publish Exchange 2010 to the Internet using Forefront TMG but do not configure pre-authentication. This way the users need to go through the Forefront TMG solution, but will authenticate directly against the Exchange 2010 Client Access servers. 
• Configure an additional OWA and ECP virtual directory on the Exchange 2010 Client Access Servers.

Reference:http://www.msexchange.org/articles-tutorials/exchange-server-2010/management-administration/enabling-forms-based-authentication-external-internal-owa-2010-users-exchange-2010-published-using-forefront-tmg-2010-part1.html

Then check the blog - Creating a custom Forefront TMG 2010 OWA FBA logon page

Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

Best Regards,

Joyce