The new Getting Started Wizard enables end-to-end deployment of IAG, up to and including publication of portals and applications. For more information, see Configuring IAG network and server settings.

IAG SP2 provides new cache-cleaning and client endpoint health-detection capabilities for Firefox on Windows, Firefox on Linux, and Safari on Mac OS. The main benefits of this feature are the following:

• Providing installation of client components for cache cleaning and endpoint health detection across operating systems that aren't Windows.
  
• Basing access policies on endpoint health information received from Firefox on Windows, from Linux, and from Mac OS.
  

IAG administrators can create and manage multi-platform policies and expressions, as well as platform-specific policies and expressions. For more information, see Managing IAG client endpoint policies.

With IAG SP2, you can use Integrated Windows authentication when you publish applications for users that are located on corporate networks. In this setup, IAG functions as both a gateway from the Internet into the organization and a gateway from within the corporate network to the data center within that network. In addition, internal users who are logged on to the Active Directory domain are not prompted for their credentials, thus making for transparent authentication and a smooth user experience.

For more information about using Integrated Windows authentication when you publish applications for users that are located on corporate networks, see About publishing applications to users located on corporate networks with IAG SP2.

Microsoft Dynamics CRM is used to manage customer relationships. This software is commonly accessed by remote users (such as a mobile sales representative) from a variety of computers (such as laptops, home computers, and mobile devices). IAG enables a robust Microsoft Dynamics CRM experience while enhancing security. The following are some of the benefits of publishing Microsoft Dynamics CRM via IAG:

• The Microsoft Dynamics CRM server doesn't have to be directly exposed to the Internet—It can reside in the datacenter.
  
• Strong authentication capabilities—End users can log on to Microsoft Dynamics CRM with smart cards, one-time password tokens, etc.
  

For more information, see Publishing Microsoft Dynamics CRM with IAG SP2.

Microsoft Office Communicator Web Access is a key product in Microsoft’s unified communications strategy.

Office Communicator Web Access is targeted towards end users working from a kiosk or from a home computer, and it is targeted towards end users that need to access Office Communicator Services from a computer running an operating system that isn't Windows and therefore cannot run Communicator client. IAG enables a robust Communicator Web Access experience while enhancing security.

For more information, see Publishing Microsoft Office Communicator Web Access with IAG SP2.

IAG 2007 first introduced support for Kerberos constrained delegation in SP1.

In the release of SP2, IAG 2007 introduces new support for Kerberos constrained delegation that provides smoother integration and enhances its capabilities (for example, deploying Kerberos constrained delegation through IAG user interface or performing Kerberos constrained delegation single sign-on for Active Directory Federation Services authentication).

For more information, see Configuring Kerberos constrained delegation with IAG SP2.

IAG SP2 allows end users to authenticate to the IAG portal and to application servers published through the portal by using form-based authentication with the following credentials: user principal name (UPN) and a password. Because the UPN of an end user is unique in a domain forest, the end user can authenticate to any application server within the forest without providing the domain as a credential.

When an end user authenticates to the IAG portal by using a client certificate (for example, a smart card) and then attempts to open an application that requires authentication, the UPN of that end user will be automatically displayed in the User name box, eliminating the need to manually type the user name.

This section contains descriptions of updates included in IAG SP2 that have been made to IAG since the release of IAG SP1.

Improved SharePoint deployment

Additional supported applications

Detection center

Enhanced logging capabilities to the Network Connector server

Additional fixes and design changes