Re<the only thing that still worries me a little is how identity delegation from Office Online to
the backend will be managed>
It will be managed using either EffectiveUserName
or KCD (default). How to
configure the former can be found here (you quoted part of it above): https://technet.microsoft.com/EN-US/library/mt346109(v=office.16).aspx
For KCD configuration, I believe the config steps haven't been published yet.
Here's a preview:
Install Office Web Apps Server and related updates
Complete these steps on any servers that will run Office Online Server Preview.
- Run Setup.exe.
- On the
Read the Microsoft Software License Terms page, select I accept the terms of this agreement and click
Continue.
- On the
Choose a file location page, select the folder where you want the Office Online Server Preview files to be installed (for example, C:\Program Files\Microsoft Office Web Apps) and select
Install Now. If the folder you specified doesnt exist, Setup creates it for you.
- When Setup finishes installing Office Online Server Preview, choose
Close.
- If you're planning to use Kerberos Constrained Delegation with Excel Online, then, in
Services, set the Claims to Windows Token Service to start automatically on this server. Also see
second NOTE here: https://msdn.microsoft.com/en-us/library/ee517278.aspx.
NOTE 1:
If you plan to use any features that utilize external data access, working with Data Models or SharePoints Power Pivot or Power View capabilities, note that Excel Online must
reside in the same AD domain forest as their user-base as well as any external data sources you plan to access using Windows-based authentication
And the "Important" note here(https://technet.microsoft.com/en-us/library/ee806870.aspx)
is no longer valid for Excel Online, though it continues to be valid for Excel Services vPrev.
NOTE 2:
If you plan to use Kerberos Constrained Delegation with Excel Online, be sure to add each Office Online Server in
the farm to the Active Directory Domain Services delegation list.
-
Edited by
Gregory Appel
20 hours 23 minutes ago