Portal Access doesn't SSO to Exchange 2010 OWA

Todd,

 

 

I hope you don't mind if I take this opportunity to correct a somewhat common misconception. It is true that for Basic auth credentials are passed in cleartext. However, forms-based auth is also being transmitted in clear. What's securing both Basic auth and forms-based auth is the SSL layer - encryption of the POST parameters in SSL and Basic Auth credentials are equivalent to each other in terms of security of the transmitted password. NTLM is obviously a different animal, as the password never crosses the wire.