Blackberry PRD-10459-003 Administration Guide - Page 272

Administration Guide Configuring Integrated Windows authentication so that users can access resources on your organization's network After you finish: Turn on Integrated Windows authentication when BlackBerry device users access resources on your organization's network. Related topics Restarting BlackBerry Enterprise Server components, 327 Turn on Integrated Windows authentication so that users can access resources on your organization's network Before you begin: • Configure the Microsoft® Active Directory® account to access resources on your organization's network. • If required, configure BlackBerry® MDS Connection Service to use a Microsoft Active Directory account when the messaging server is in a remote Microsoft Active Directory domain. 1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry solution topology > BlackBerry Domain > Component view. 2. Click MDS Connection Service. 3. Click Edit component. 4. In the Integrated authentication turned on drop-down list, click Yes. 5. For each Microsoft Active Directory account, provide the following information: • In the Delegation user domain field, type the FQDN (for example, ldap.example.com). • In the Delegation user name field, type the user name. • In the Password and Confirm fields, type the password. 6. Click Save all. 7. On the HTTP tab, click Edit component. 8. In the Authentication support enabled drop-down list, click Yes. 9. Click Save all. 10. On the Pull URL Patterns tab, specify web address patterns for the intranet sites or shared folders that you want to permit BlackBerry device users to access (for example, intranet_site(:80)?(\/.*)?). The web address patterns are based on Java® regular expressions. Consider specifying the following web address patterns: • Specify .*\:.*\/.* as the web address pattern so that you can prevent users from using any other web address patterns to access intranet sites or shared network folders. • Specify .* as the web address pattern for OCSP, LDAP, and TCP to permit users to communicate with OCSP servers, LDAP servers, or TCP servers. 11. On the Access control rules tab, create a pull rule for each of the web address patterns that you specified. When you create the pull rule, in the Authentication drop-down list, click Integrated or Integrated and RSA. 12. Click Save all. 13. Assign the pull rules to the users or groups that you want to access intranet sites or shared network folders. 14. On the Servers and components menu, expand BlackBerry solution topology > BlackBerry Domain > Component view > MDS Connection Service. 15. Click a BlackBerry MDS Connection Service instance. 270