Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

We have an internal portal on SharePoint Server 2010. For example portal.abc.com. We are using Windows authentication (NTLM).

When users access the portal from a joined computer in an Active Directory domain, everything works fine, however, we have some users that work with iPads using mobile Safari.

Users need only read the information on the portal. They use VPN (PPTP). Every time when these users try to log into the portal, SharePoint prompts for credentials. Every time.

Does anyone know how to fix it? I'll be glad to any suggestions as to prevent users from such inconveniences.

share|improve this question
add comment

2 Answers 2

up vote 3 down vote accepted

As the iPad is not a domain device, it doesn't have the capability for cached credentials. The most robust solution I've seen on an iPad uses TMG to handle the authentication component. When the user hits the SharePoint site, they're prompted by TMG for user credentials. TMG then securely processes the authentication and provides the handoff to SharePoint. You can also implement a SSO style solution using this same method so that as users move from one web application to another (ie: intranet and mysites) they are not prompted for additional authentication, as it's all funneled through TMG.

This may be a heavier solution than you're looking for, but it is a more robust way of handling that mobile device connectivity end of things.

share|improve this answer
    
Thank you for your response. I will try to use TMG. –  SDG Jun 9 '12 at 4:17
    
But how do you think it is possible to somehow use client certificates without using TMG? I certainly know that Sharepoint does not provide built-in support for Client Certificate Authentitsation. Can this be done using IIS? –  SDG Jun 9 '12 at 4:18
    
I'm fairly certain that certificate authentication can be handled with TMG, the question that comes to mind is the compatibility and ability to load the certificate onto the iPad. I haven't used that approach, so I'm not sure if the iPad would support it; something worth investigating though. –  webdes03 Jun 9 '12 at 14:02
add comment

Exploring these two items may be helpful - Disable the Loopback check in the server and put the site in a Trusted Zone in the (Safari) browser. Another (lesser secure) way is to use Basic authentication.

share|improve this answer
    
Thank you. Of course, I'll try, but I doubt it will help. But if it will help, it will be very great. –  SDG Jun 9 '12 at 4:20
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.