Previous Topic: Office Client IntegrationNext Topic: Configure WebDAV For Microsoft Hot Fixes 2563214 and 2647954


Configure Office Client Integration

Office Client Integration lets users collaborate on Microsoft Office documents stored in SharePoint. When users open a Microsoft Office document on SharePoint, they use the related Microsoft Office application to edit the document.

This flowchart describes how to configure Office Client Integration

Follow these steps:

  1. Open the Administrative UI to change Policy Server objects.
  2. Update the Agent Type to include the HTTP methods for WebDAV.
  3. Add the HTTP methods for WebDAV to your existing rules.
  4. Update your Agent Configuration Settings for Office Client Integration.
Change the Policy Server Objects

Change the objects on your Policy Server by opening the Administrative UI.

Follow these steps:

  1. Open the following URL in a browser.
    https://host_name:8443/iam/siteminder/adminui
    
    host_name

    Specifies the fully qualified Administrative UI host system name.

  2. Enter your CA SiteMinder® superuser name in the User Name field.
  3. Enter the CA SiteMinder® superuser account password in the Password field.

    Note: If your superuser account password contains dollar‑sign ($) characters, replace each instance of the dollar-sign character with $DOLLAR$. For example, if the CA SiteMinder® superuser account password is $password, enter $DOLLAR$password in the Password field.

  4. Verify that the proper server name or IP address appears in the Server drop-down list.
  5. Select Log In.
Update the Agent Type to Include the HTTP Methods for WebDAV

To use the Office Client Integration feature, modify the Agent type to include the methods for WebDAV.

Follow these steps:

  1. Click Infrastructure, Agents, Agent Type, Modify Agent Type.

    The Create Agent Type search pane appears.

  2. Highlight the text in the search field, and then type the following:

    Web Agent

  3. Click Search.

    The Web Agent type appears in the list.

  4. Click Select.

    The Modify Agent Type: Web Agent pane appears.

  5. Scroll to the bottom of the Actions section, and then click Create.

    A new action field appears at the end of the list.

  6. Highlight the text in the New Action field, and then enter the following:
    Head
    
  7. Scroll to the bottom of the Actions section, and then click Create.

    A new action field appears at the end of the list.

  8. Repeat Steps 6 and 7 until all of the following methods are added:
    OPTIONS
    
    PROPFIND
    
    PROPPATCH
    
    COPY
    
    DELETE
    
    MOVE
    
    LOCK
    
    UNLOCK
    
  9. Click Submit.

    The Modify Agent type task is submitted for processing. A confirmation screen appears.

  10. Click OK.

    The Agent type settings for your SharePoint resources are updated.

Add the HTTP Methods for WebDAV to Your Existing Rules

To use the Office Client Integration feature with the CA SiteMinder® Agent for SharePoint, update the web agent actions in any rules protecting SharePoint sites.

Follow these steps:

  1. Click Policies, Domains, Rule, Modify Rule.

    The Modify Rule screen appears.

  2. Click the option button of the domain that contains the rule you want, and then click Select.

    Modify Rule: Name screen appears.

  3. In the Action drop-down list, press and hold Ctrl and click the following items:
  4. Click Submit.
  5. Repeat Steps 2 through 4 for any additional rules that you want.

    The rule is updated, and the confirmation screen appears.

Update your Agent Configuration Settings for Office Client Integration

The parameter settings in the Agent Configuration Object that is associated with your CA SiteMinder® Agent for SharePoint control how Office Client Integration operates on your CA SiteMinder® Agent for SharePoint.

Follow these steps:

  1. Click Infrastructure, Agent Configuration, Modify Agent Configuration.
  2. Click the edit button for the Agent Configuration object of your CA SiteMinder® Agent for SharePoint.

    The Modify Agent Configuration: Name pane opens.

  3. Change the values of the following parameters:
    SPClientIntegration

    Specifies the hostnames of the SharePoint servers that the Agent for SharePoint protects on which you want to permit Office Client Integration. The default parameter is blank and listed as plain. If there are multiple host entries, use the multivalue option button to add multiple hosts.

    Add a port number to the value if the Agent for SharePoint operates on a nondefault port (any port except 80 or 443).

    To use this parameter, verify that the SharePoint resources that CA SiteMinder® protects also have their Office Client Integration enabled on the SharePoint central administration server.

    Because Office Client Integration requires a persistent FedAuth cookie, verify that your SharePoint server is not configured to use session cookies. By default, UseSessionCookies in SharePoint is set to NO.

    Default: None

    Limits: Multiple values are allowed. Use fully qualified domain names for all values.

    Example: agent_for_sharepoint_host_name.example.com (default ports of 80 or 443)

    Example: agent_for_sharepoint_host_name.example.com:81 (with a nondefault port number for HTTP)

    Example: agent_for_sharepoint_host_name.example.com:4343 (with a nondefault port number for HTTPS)

    SPDisableClientIntegration

    Specifies the hostnames of the SharePoint servers that the Agent for SharePoint protects on which you want to prohibit Office Client Integration. The default parameter is blank and listed as plain. If there are multiple host entries, then switch over to a multi—value parameter. The URL in this parameter requires a port number (even for a default port such as 80 or 443).

    This setting prevents SharePoint administrators from circumventing CA SiteMinder® settings regarding Office Client integration.

    Limit: Multiple values are allowed.

    Example: agent_for_sharepoint_host_name:port_number

  4. The following parameter describes the user agent values to which the CA SiteMinder® Agent for SharePoint permits access:
    SPAuthorizeUserAgent

    Specifies a list of Microsoft Office user-agent strings for which the Agent for SharePoint allows access. This list is populated automatically with the default values when the Agent for SharePoint starts. The user-agent strings in this parameter act as a whitelist. Changes to this parameter override the default settings. Access is denied to clients whose user-agent string does not appear in the list.

    For example, setting the value to Microsoft Office allows access to all versions of Microsoft Office products that are associated with that user-agent string. Conversely, setting the value to Microsoft Office/12.0 allows access to only those versions of Microsoft Office products that are associated with that user-agent string.

    Default: Microsoft Office, MS FrontPage, MSFrontPage, Microsoft Data Access Internet Publishing Provider Protocol Discovery, Test for Web Form Existence, Microsoft-WebDAV-MiniRedir

    Limits: Multiple values are allowed.

  5. Examine the default values of the previous parameter. Ask your SharePoint or IIS web server administrator if more user-agent values are required.

    Note: Microsoft (not CA Technologies) defined the user-agent strings in the previous parameter. For more information about these user-strings, search the Microsoft Developer Network (MSDN) library website for information about the user-string that you want.

  6. Change the value of the CSSChecking parameter to no.

    Note: Because the CA SiteMinder® Agent for SharePoint is a proxy-based solution, this setting is required for Office Client Integration.

  7. Click OK.

    The new values appear next to the parameters in the list.

  8. Click Submit.

    The Create Agent Configuration Task is submitted for processing and the confirmation message appears.