IBM(R) Security Access Manager for Microsoft Solutions, Release 1.8
===================================================================================

(C) Copyright International Business Machines Corporation 2017. All rights reserved.
U.S. Government Users Restricted Rights -- Use, duplication or disclosure restricted
by GSA ADP Schedule Contract with IBM Corp.

NOTE:  Before using this information and the product it supports, read the general
       information under "NOTICES" in the Integration Guide.

DATE:  2017 March 19
BUILD: 6


    CONTENTS

	1.0 ABOUT THIS RELEASE
		1.1 Release Contents
		1.2 Supported Versions
		1.3 Known issues

	2.0 NEW FEATURES
		2.1 Marketing Requests addressed in Release 1.8
		2.2 Marketing Requests addressed in previous releases

	3.0 APARS AND DEFECTS FIXED
		3.1 Problems Fixed by Release 1.8
		3.2 Problems Fixed in Release in previous releases

	4.0 INSTALLING THIS RELEASE
		4.1 Installing this Release

	5.0 VERIFYING THE RELEASE VERSION


1.0 ABOUT THIS RELEASE
----------------------

1.1 Release Contents

This release package contains:
	- This README file
	- Integration Guides
	- SharePoint solution package
	- IIS solution package
	- ASP .NET Solution Package
    	- Office 365 solution package
	- Examples

1.2 Supported Versions

	IBM Security Access Manager
	---------------------------
      - IBM Security Access Manager for Web Version 9.0 or
    	- IBM Security Access Manager for Web Version 8.0 or
    	- IBM Security Access Manager for Web Version 7.0 or
    	- IBM Tivoli Access Manager for e-business WebSEAL Version 6.1.1
	- IBM Tivoli Federated Identity Manager 6.2.2 Fix Pack 16

	isam_aspnet_int_guide.pdf
	---------------------------------
	- Microsoft Internet Information Servers 6.0 and above

	isam_iis_module_int_guide.pdf
	---------------------------------
	- Microsoft Windows 2008 x64
	- Microsoft Windows 2008 R2
	- Microsoft Windows 2012
	Note: IBM Security Access Manager Impersonation Authentication Module
	supported with Microsoft Exchange 2013 on Windows 2012 Server only.

  fim_saml_sharepoint_guide.pdf
	isam_claims_sharepoint_guide.pdf
	------------------------------
	- Microsoft SharePoint 2016

	fim_saml2_office365_guide.pdf
	------------------------------
	- Microsoft Office 365


1.3 Known Issues

	Issue: Microsoft Office integration with IBM Security Access Manager for SharePoint.
	Description: When WebSEAL basic or forms authentication is enabled, creating, opening
		and modifying documents will prompt the user for authentication.  This is a known
		issue in WebSEAL and the Access Manager product team are investigating the solution.

	Issue: Microsoft Exchange 2010 integration with IIS Impersonation Module not supported.
	Description: Microsoft Exchange development team removed the SE_TCB_PRIVILEGE from the
	process token for OWA and ECP (w3wp) processes.  The following URL describes the issue
	in more detail:
		http://blogs.msdn.com/b/asiatech/archive/2014/03/31/se-tcb-privilege-being-removed-from-the-process-token-for-owa-and-ecp-processes-w3wp-since-exchange-2010.aspx

2.0 NEW FEATURES
---------------------------

2.1 Marketing Requests addressed in Release 1.8
	 MR#: N/A (Internal)
   Description: Need updated Integration Adapter package to provide SSO for SharePoint 2016 using IBM Security Access Manager.

   Note: This release cannot be used with versions prior to SharePoint 2016. Version 1.7 of this release has
   support for SharePoint 2013, which can be downloaded from this location.
   ftp://public.dhe.ibm.com/software/tivoli_support/misc/Security/AMeB/Microsoft/ISAMMsSolutions-1.7.zip

2.2 Marketing Requests addressed in previous releases

  MR#: N/A (Internal)
  Description: Support for LDAP lookup for ASP.NET Role and Membership provider.

  MR#: N/A (Internal)
  Description: Update Powershell command for Sharepoint farm deployment.

  MR#: N/A (Internal)
  Description: Deprecate the following guides in favour of Kerberos support in ISAM 8.0.0.4 or greater.
    am_kerberos_int_guide.pdf
    am_kerberos_sharepoint_guide.pdf
    am_kerberos_exchange_guide.pdf

  MR#: N/A (Internal)
  Description: Sunset the IIS Impersonation Module in favour of Kerberos support in ISAM 8.0.0.4 or greater.

  MR#: N/A (Internal)
  Description: Updated format of integration guides.  This includes references to available product enhancements.

  MR#: N/A (Internal)
  Description: Support for SAML v2 with Microsoft Office 365 in favour of WS-Federation and WS-Trust protocols.

	RFE#: 28838
	Description: Update to ISAM Microsoft ASP.NET integration module to support MVC model.
	Notes: Released as a DevWorks article.
	    https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/W3180eb23c62c_4bcb_afa1_85cd0cacc66c/page/ISAM%20for%20ASP.NET%20MVC

	RFE#: 68264
	Description: Support IBM Security Access Manager Impersonation Authentication Module for Microsoft IIS 8.5
	Notes: Integration guide and release notes updated to clarify platform support.

	RFE#: 55877
	Description: ISAM for Web 7 urgent fix request: Office applications single sign-on
		does not work for some use cases.

	RFE#: 43668
	Description: SSO of TAM MSOffice  integration feature, need to improve.

	MR#: N/A (Internal)
	Description: ISAM 8 Currency.
	Note: Relevant guides have been updated to reflect testing against ISAM 8.0.

	MR#: N/A (Internal)
	Description: SharePoint configuration page.
	Note: Removed package element that only allows SharePoint CA site administrators
		access to the Access Manager configuration link.

	MR#: N/A (Internal)
	Description: Office 365 Windows Integration Authentication support.
	Note: Add support for active and passive Microsoft Office users on a domain to authenticate via WebSEAL.

	MR#: N/A (Internal)
	Description: Impersonation module configuration
	Note: Add support to enable configuration to be removed via the IIS applet.

	RFE#: 39147
	Description: Support Office 365 active profile integration

	RFE#: 38239
	Description: Office 365

	RFE#: 37816
	Description: TFIM: Outlook with Office 365

	RFE#: 37223
	Description: Access manager for Web integration with Microsoft office 365

	RFE#: 35241
	Description: TFIM federated support for Office 365 active clients

	RFE#: 42215
	Description: Enhance the ISAM role and membership provider to provide
		non-interactive logon to behave similar to Windows authentication

	RFE#: 33146
	Description: Enable the MS Solutions SharePoint HTTP Header
		Role and Membership providers for Generic ASP.NET applications

	RFE#: 43669
	Description: It doesn't work if clicking right mouse button( context menu)
		to open MSOfficedoc on SharePoint server  by authentication

	MR#: N/A (Internal)
	Description: Refactoring of assembly namespaces from IBM.Tivoli.Web to IBM.Security.Web.
	Note: This release is not compatible with previous versions of the integration.

	MR#: N/A (Internal)
	Description: Support for IBM Security Access Manager Impersonation Authentication Module with SharePoint
	Note: This release enables WebSEAL SSO to SharePoint via the Impersonation Module.  This integration is
		limited to the Known Issues referenced above.

	MR#: N/A (Internal)
	Description: Address double appearance of "Configure Access Manager Authentication Settings" in
		"Security->General Security"

	MR#: N/A (Internal)
	Description: Handle removal of <isamAuthentication> stanza from web.config files on uninstall
		of the Impersonation Module.

	MR#: N/A (Internal)
	Description: Update link in Access Manager Authentication Settings page in SharePoint Central
		Administration.

	MR#: MR0829116119
	Description: The desired functionality is to have WebSEAL carryout SSO to MS Sharepoint office client through
		the AMAL module.
	Note: This release enables SSO to Microsoft Office 2007 and 2010 for limited scenarios. See the integration guide
	      for information on supported functionality and environments.

	MR#: N/A (Internal)
	Description: Microsoft Office Client Integration for Microsoft Office 2010
	Note: This release enables SSO to Microsoft Office 2007 and 2010 for limited scenarios. See the integration guide
	      for information on supported functionality and environments.

	MR#: N/A (Internal)
	Description: Support for SharePoint Role & Membership Provider with TAM 7.0

	RFE#: 12934 (PMR#: 28926,300,624)
	Description: TAM Membership and Role provider for Sharepoint 2010
	Note: Microsoft PowerShell script to apply configuration not covered by the Solution and Feature Installer
	      in multi farm environments.

	MR#: MR1124103312
	Description: SSO for SharePoint Claims
	Note: This release incorporates support for Microsoft SharePoint 2010 leveraging existing SharePoint
	      and ASPNET frameworks.

	MR#: MR#: RFE35874
	Description: SAML for Claims based Authentication SharePoint Guide
	Note: This guide demonstrates Tivoli Federation Identity Manager and SharePoint
	      integration using SAML claims.

	MR#: N/A (Internal)
	Description: Examples
	Note: Example XSLT, HTML and Microsoft PowerShell script is provided to support the SAML for claims
	      based authentication SharePoint 2010 integration.

	MR#: RFE32002
	Description: ISAM for Web 7 and MS Exchange/SharePoint 2013 integration guide
	Note: This release includes a native impersonation module for Microsoft Internet Information Service (IIS) and
	      associated configuration applet in IIS.  The impersonation module uses a configured WebSEAL
	      header i.e. IV-USER to generate a Kerberos token to perform impersonation. Accompanying integration
	      guide and deployment PowerShell is included.
	      Support is only currently available for Microsoft Exchange 2013.

	MR#: RFE32997
	Description: Need updated Integration Adapter package (AmMsSolution) to provide SSO for SharePoint 2013
		using IBM Security Access Manager

	MR#: RFE33380
	Description: TAMeb support of Exchange 2013

	MR#: RFE10034/dW20671
	Description: TAMeb SharePoint Integration

	MR#: MR0505092559
	Description: TAMeb 6.1 and Microsoft IIS 7.0 Integration Guide

	MR#: N/A (Internal)
	Description: Name of the integration guide incorrect in release notes.
	Note: Update the release note to reflect the correct integration guide name.


3.0 APARS AND DEFECTS FIXED
---------------------------

Because releases are cumulative, this release corrects all the problems
outlined in the following sections.

3.1 Problems Fixed by Release 1.8
	N/A


3.2 Problems Fixed in Release in previous releases

  PMR#:  16084,756,000
  Description: Cannot connect to SharePoint through WebSEAL if username has spaces.
  Note: Updated to perform HTML character decoding.

	PMR#:  16084,756,000
	Description: Cannot connect to SharePoint through WebSEAL if username has spaces.
	Note: Updated to perform HTML character decoding.

	PMR#: 16545,756,000
	Description: Enhance IBM's solution for claims based SSO to SharePoint to support HNSC sites.
	Notes: SharePoint integration now supports host named site collections (NHSC).

	APAR#: IV62169
	Description: Impersonation  module for Microsoft Windows fails to load.
	Note: Documentation updated to reference Microsoft VC++ 2013 runtime.

	APAR#: N/A (Internal)
	Description: IIS Impersonation Module multi-domain support.

	APAR#: IV46387
	Description: SharePoint LDAP Lookup is Not Working Correctly
	Note: Fixes the resolution of an invalid or non-existent LDAP server.

	APAR#: N/A (Internal)
	Description: Examples
	Note: Updated ip_post_to_sp.html for multi browser JavaScript support.

	APAR#: N/A (Internal)
	Description: TFIM junctions support
	Note: Updated user guides correcting TAM version support for TFIM junctions.

	APAR#: N/A (Internal)
	Description: Examples
	Note: Example Microsoft PowerShell script is provided to add necessary configuration for the Claims
	      based Membership and Role Providers for SharePoint 2010 integration.

	APAR#: IV35738
	Description: SHAREPOINT MEMBERSHIP PROVIDER ACTIVATED FOR ALL ZONES OF WEBAPP
	Note: Updated TAMClaimsAuthenticationModule to redirect in OnSignOut() event only if TAM configuration is applied.

	PMR#:  22663,550,000
	Description: WS-Federation single sign-on federation between TFIM 6.2.1 (IDP) and SharePoint 2010 (SP) using SAML1.1
	Note: Add support for Firefox, Mozilla, Opera (where the USER-AGENT in not Opera) and Chrome.

	APAR#: IV42381
	Description: OBJECT REFERENCE NOT SET TO AN INSTANCE OF AN OBJECT.
	Note: Includes enhanced error message handling and prevention of non-ISAM features in SharePoint
	      which are corrupt causing an exception in the ISAM feature.

	PMR#: 38072,622,760
	Description: SharePoint 2013 feature activation issue
	Note: Fixes the way SharePoint applies web.config changes via SPWebConfigModification for assembly version redirect.



4.0 INSTALLING THIS RELEASE
---------------------------

4.1 Installing this Release
	Refer to instructions in the relevant Integration Guide.

5.0 VERIFYING THE RELEASE VERSION
---------------------------------

1.8 is released with Integration Guide Version 1.8 Release i.
Refer to Page 4 in the relevant Integration Guide to determine the document version.


End of IBM(R) Security Access Manager for Microsoft Solutions, Release 1.8
