Shibboleth with Office 365

[Ryan Larscheidt]

From that blog post:

> SSL certificates for ECP
> 
> Despite being explicitly told what trust fabric certificate to trust (when configuring the federation settings via the Set-MsolDomainAuthentication powershell command), the Microsoft SP will refuse to communicate with an HTTPS endpoint using an untrusted (or, in our case, self-signed) certificate.


This doesn't appear to be true, because we're using our IdP's self-signed cert on the ECP endpoint with Office 365 (we're not in production yet).

Microsoft had an ECP outage that started a few days before that blog post.  While troubleshooting with Microsoft we were told that the certificate couldn't be self-signed, but I think there was some confusion between ADFSv2's cert requirements and SAML2's.

Thanks,
Ryan

On May 21, 2013, at 15:55 , caleb racey <caleb.racey at newcastle.ac.uk> wrote:

> The kent university blog  http://blogs.kent.ac.uk/unseenit/2013/02/05/office365-and-shibboleth/  is a good source of practical information on shibboleth and office365
>  
> Cal
> From: users-bounces at shibboleth.net [users-bounces at shibboleth.net] on behalf of Sumit Sancheti [sumitsancheti at hotmail.com]
> Sent: 21 May 2013 00:06
> To: users at shibboleth.net
> Subject: Shibboleth with Office 365
> 
> Hello All,
> 
> One of my customer is planning to migrate from Live at edu to Office 365. Currently they are using SSO Toolkit. However as SSO Toolkit will be Sunset soon as confirmed by Microsoft Live at Edu.
> 
> Therefore customer looking for Shibboleth for SSO.
> We tried convincing them for ADFS, but as they are using Shibboleth for other authentication, so would like to implement the same. Moreover, it suggested as one of the authentication model for Office 365.
> 
> Team, if anyone has work on Shibboleth than kindly share information on the below queries:
> 
> a) How many days it took for the testing to be completed? 
> b) Any project plan? Our customer looking for Project Plan with time lines? 
> c) Any other document besides Microsoft that explain with screenshot on how to integrate Shibboleth with Office 365 Test Tenant. (we are planning to test first on a trail tenant) 
> 
> Any pointer will be of great help!
> 
> 
> Regards,
> 
> Sumit
>  
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 7327 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20130521/93d4dede/attachment-0001.bin