Citrix states in their article: CTX109042

Document ID: CTX109042, Created on: Mar 13, 2006, Updated: Mar 13, 2006

Products: Advanced Access Control 4.2

Summary

The following are some advanced options for configuring SharePoint when being proxied by the Advanced Access Control.

Different portions of the Navigation UI can be accessed directly through URLs when accessing these URLs through the Web proxy in the Advanced Access Control. In addition, when accessing SharePoint through Advanced Access Control and Web proxy has been set for SharePoint vice direct access, all calls are made through the Web proxy and verified by the policy engine. You continue to control all behind the scenes content the user has access to.

For example, if you look at the Navigation UI, it has at most four separate components:

1. Email (Outlook Web Access (OWA), iNotes, and native email)

2. File shares (mapped file shares)

3. Web sites (published Web resources)

4. Applications (Web Interface published applications)

All of these components can easily be added to SharePoint’s “Page Viewer Web Part.” Access to the URLs are controlled by Advanced Access Control and authentication is automatically handled as can be seen in the case of iNotes and OWA.

Note: These URLs can be used in any other Web application that is front ended by Advanced Access Control as well.

Web Interface

Example:

Create a sub-area in your SharePoint server and add in the “Page Viewer Web Part.” Assign the URL for your Web Interface Server that has been upgraded and configured for Advanced Access Control. You will notice with this URL that you cannot access it directly, but only through Advanced Access Control.

Sample URL: http:///citrix/metaframe

SharePoint after adding in this Web Part and URL

Published Web Sites

Example:

Create a sub-area in your SharePoint server and add in the “Page Viewer Web Part.” Assign the following URL to your Web Part:

http://localhost/citrixsessioninit/urllist.aspx

All published Web sites that appear in the Web Sites pane of the Navigation UI are accessed through the URL above.

Files Shares

Example:

Create a sub-area in your SharePoint server and add in the “Page Viewer Web Part.” Assign the following URL to your Web Part:

http://localhost/citrixfei/myfiles.asp

In the following illustration, see the initial page listing the published file shares:

Shown are the contents of the share after clicking on it. The functionality and policy enforcement are the same as if accessing File Shares through the Navigation UI.

Native Email

Citrix provides a method for accessing user’s email on the exchange server for companies that do not wish to turn on Outlook Web Access. Using this email client requires Microsoft Exchange tools to be installed on each Advanced Access Control server in the farm.

Example:

Create a sub-area in your SharePoint server and add in the “Page Viewer Web Part.” Assign the following URL to your Web Part:

http://localhost/citrixfei/classic.asp

iNotes

Put in the URL that you would use to access iNotes directly into the Page Viewer Web Part. The user will receive pass-through authentication and not be prompted for credentials as long as the credentials used to sign on to Advanced Access Control are the same as the credentials used for iNotes.

Outlook Web Access

Just like OWA can be configured for use inside the Navigation UI, access to OWA can be controlled in SharePoint. The user will receive pass-through authentication and not be prompted for credentials as long as the credentials used to sign on to Advanced Access Control are the same as needed for OWA.

Example:

Create a sub-area in your SharePoint server and add in the “Page Viewer Web Part.” Assign the URL for your OWA server to your Web Part.

Sample URL: http:///exchange