Shibboleth Office365 login errors

[Jones, David A]

I tried switching to the HTTP-Redirect binding, that failed with a different error.  Also,  verified with Microsoft that HTTP-POST is what we should be using.  Could there be a problem with the HTTP-POST binding?  How could I troubleshoot?

Using Fiddler, I have been able to take a look at the traffic.

Login.microsoftonline.com:  GET /GetUserRealm.srf?login=ecostello%40ku365.kutztown.edu&handler=1 HTTP/1.1
Tunnel to  443
Our IDP server: GET /idp/profile/SAML2/POST/SSO?cbcxt=&vv=1300&username=ecostello%40ku365.kutztown.edu&mkt=en-us&lc=1033&wa=wsignin1.0&wtrealm=urn:federation:MicrosoftOnline&wctx=mkt%3DEN-US%26lc%3D1033%26bk%3D1366915469%26vv%3D1300%26LoginOptions%3D1 HTTP/1.1

Anyone with SSO set up between Shibboleth and Azure AD, specifically Office365?

Thanks,
Dave



From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Paul Hethmon
Sent: Thursday, April 18, 2013 10:30 AM
To: Shib Users
Subject: Re: Shibboleth Office365 login errors

The likely cause is they are sending the authentication request using HTTP-Redirect binding to the HTTP-POST endpoint. They are not interchangeable. You can look at your web container access logs to see if you see a query string attached to the request going to the POST endpoint to confirm.

If that is the case, you need to change the configuration to have Office365 send the message to the correct location.

Paul


From: <Jones>, David A <dajones at kutztown.edu<mailto:dajones at kutztown.edu>>
Reply-To: Shibboleth Users <users at shibboleth.net<mailto:users at shibboleth.net>>
Date: Thursday, April 18, 2013 10:20 AM
To: Shibboleth Users <users at shibboleth.net<mailto:users at shibboleth.net>>
Subject: Shibboleth Office365 login errors

>From what I can tell, the HTTP POST method is unable to decode the message.    Any thoughts?



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130425/2f5e9a70/attachment-0001.html