federated auth with Microsoft Office 365

[Paul B. Henson]

On Thu, Aug 16, 2012 at 08:09:21PM -0700, Cantor, Scott wrote:
> they did with ECP is unclear to me. Some of it is similar in form
> (basic-auth in Outlook), but it wouldn't be the same protocol, so I don't
> know if it's in addition, instead of, dropped, etc.

According to their docs, with ECP configured on the shibboleth side they
support Outlook 2007, Outlook 2010, Thunderbird 8 and 9, iPhone, and
Windows Phone 7. That's still a pretty narrow set of clients, which
doesn't include mine (mutt) :(.

It looks like ECP is enabled in the default config for the newer IdP
releases? I don't have it enabled, but that's probably more because I
didn't bother to update my existing config with it than an intentional
decision not to support it :). Looks like most people are in the same
boat, only 5 Idp's in the incommon metadata seem to support ECP. Is
there any reason not to enable it, other, I suppose, than the need to
have a separate authentication mechanism configured for it?


-- 
Paul B. Henson  |  (909) 979-6361  |  http://www.csupomona.edu/~henson/
Operating Systems and Network Analyst  |  henson at csupomona.edu
California State Polytechnic University  |  Pomona CA 91768