Forefront TMG Forms Based Authentication Template for Exchange 2013 OWA

A little while ago, we posted a Mobile Friendly Forefront TMG Forms Based Authentication template to make logging into internal sites protected by Forefront TMG  easier on phones and tablets.

Soon after we added a template specifically for Exchange OWA and thanks to some community contribution (thanks ablanken!), fixed some bugs to do with the public/private network setting.

With the release of Exchange 2013, we thought we'd create a new mobile friendly authentication template in the new Exchange 2013 Outlook Web App style.

Here's what it looks like for both Desktops and Mobiles:

To use the new template:

1. Download the new template package here, or from the GitHub repo. The package contains three templates; ISA, Exchange and Exchange 2013.
2. On your Forefront TMG Server, copy the existing Exchange OWA Template folder at: C:\Program Files\Microsoft Forefront Threat Management Gateway\Templates\CookieAuthTemplates\Exchange
3. Call the duplicated folder 'Exchange2013' (or whatever takes your fancy). You should now have a folder here: C:\Program Files\Microsoft Forefront Threat Management Gateway\Templates\CookieAuthTemplates\Exchange2013
4. Copy all files in the Exchange2013\HTML folder in the above template package zip into the HTML sub-folder of your  new 'Exchange2013' folder (replace the existing files). Feel free to replace Logo.png with your own custom logo.
5. In your TMG Management console, edit your desired Web Publishing rule and go to the Listener page. Click Properties.
6. On the Authentication page, ensure HTML Forms Authentication is selected.
7. On the Forms Tab enter Exchange2013 (you don't need to enter the entire path, just the word 'Exchange2013' without the quotes)
8. If you used the Exchange Publishing Wizard in Forefront TMG, you also need to go to the Application Settings tab and enter 'Exchange2013' in the 'Type the custom HTML for set directory' edit box.
9. Apply the changes.
10. Restart the TMG Firewall Service (yeah, I know... Unfortunately TMG Caches these pages and restarting the service is the only way to clear it as far as I know).

Thanks very much to our good friends Richard Hicks and Will Smothers for persevering through countless Firewall Service restarts helping us test the template and bolt it into good working shape!

Enjoy and we look forward to hearing what you think in the comments!