TFS with Kerberos behind Forefront

Question

Hello,

We are trying to set-up a TFS Server behind a Forefront server to be used by external users but due to security, we do not want to use the Basic Auth for the TFS authentication. If we enable Kerberos auth, will this topology work?

Answer 1

Hi Alin, 

Thanks for your post.

We can use the Kerberos authentication for TFS 2010 when configuring TFS Server by suing the Advanced Configuration. Please refer to this document: http://msdn.microsoft.com/en-us/library/dd631919.aspx.   

If you want to change the TFS 2010 Server url for use externally, we need to set it, please refer to the detailed steps in article: http://www.tjopsta.net/2010/04/16/how-to-change-team-foundation-server-2010-urls-for-use-externally/.   

---

John Qiao [MSFT]
MSDN Community Support | Feedback to us

Answer 2

Hi John,

I understand haw to make these changes, my question is if this setup will work behind the Forefront server.

Thank you,

Alin

Answer 3

Hi Alin,

Thanks for your reply.

As far as I know we can install the TFS 2010 behind the Forefront server. And you can setup this scenario in the test environment to test it, if occur any issue, you can post it there, we and our members will give the response ASAP.  

---

John Qiao [MSFT]
MSDN Community Support | Feedback to us