Shibboleth and Office365 - Fixes

[Christopher Bongaarts]

On 1/28/2013 8:47 AM, Ryan Suarez wrote:
> On 13-01-28 8:53 AM, Ryan Larscheidt wrote:
>> What happens when you visit https://outlook.com/studentmail.mydomain.ca?  It should redirect to your IdP, bypassing the Office 365 login page.
>
> It does.

FWIW, this is the approach we've taken for integrating Google Apps.  You 
could use a similar setup for O365 if you wanted.

   https://mail.umn.edu
Authenticates the user via Shib, determines (via an attribute) whether 
the user is a Google user or local user, and redirects them to either 
the gmail or gophermail link below.  For users who are being migrated, 
it lists both and allows the user to select.  This is generally the 
preferred, advertised way to get to your mail, since it handles all 
possible cases.

   https://gmail.umn.edu
Redirects the user to the UMN-specific GMail page (gmail.com/a/umn.edu 
or something like that), which then performs a Shib auth (SSO kicks in 
so user needn't re-enter credentials) to get the user into their UMN GMail.

   https://gophermail.umn.edu
Our local webmail system.  Uses Shib for auth, so gets the same SSO 
benefits as gmail.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%