Configure external access for mobile devices in SharePoint 2013


Applies to: SharePoint Foundation 2013, SharePoint Server 2013

Topic Last Modified: 2017-06-02

Summary: Learn how to access SharePoint 2013 on mobile devices external to a network.

Mobile device users can access a SharePoint site either by using a mobile browser or by using a rich client application. This article describes how to make SharePoint sites available for mobile devices when the devices are used outside the corporate firewall. There are three methods for enabling external access:

  • Reverse proxy server   A reverse proxy server that supports Secure Sockets Layer (SSL), such as Microsoft Forefront Unified Access Gateway (UAG), enables you to publish SharePoint sites across the corporate firewall. The following steps summarize how to make a SharePoint site available from outside the corporate firewall when you use a reverse proxy server:

    • Set up and configure the reverse proxy server such as UAG.

    • Publish the SharePoint site on the reverse proxy server.

    • Configure an alternate access mapping for the SharePoint site.

    • Add the SharePoint site to a zone that allows for cross-firewall access. For more information about cross-firewall access, see Configure cross-firewall access later in this article.

    For more information about Forefront UAG such as planning and deployment guidance, see Forefront Unified Access Gateway (UAG) and SharePoint publishing solution guide in the Forefront Technical Library.
  • Mobile proxy server   Mobile proxy servers can help mobile devices work within the IT infrastructure of a company. To access a SharePoint site from outside the corporate firewall, the mobile proxy server must pass the mobile browser's HTTP headers directly through to SharePoint Server 2013.

  • Direct Internet access   The SharePoint site can be placed on the extranet. This method supports only basic authentication. We recommend that you use a combination of technology and policy safeguards, such as SSL, with any Internet-facing servers.

After the SharePoint site is published outside the firewall, you must add the site to a zone that allows for cross-firewall access. A cross-firewall access zone is used to generate external PC and mobile URLs in mobile alert messages, and enables users to send an externally available URL when they click the E-mail a link or Alert Me button on the ribbon.

To configure a cross-firewall access zone
  1. Verify that you have the following administrative credentials:

    • You must be a member of the Farm Administrators group.

  2. In Central Administration, click System Settings.

  3. On the System Settings page, under Farm Management, click Configure cross firewall access zone.

  4. On the Cross Firewall Access Zone page, in Web Application, in the Web Application list, select the web application that is published across the firewall.

  5. In Cross Firewall Access Zone, in the Zone selection for cross firewall access list, select the zone that is published across the firewall.