Office 365 - Outlook and Activesync not working with Shibboleth IdP

[Dennis Casimiro]

I am using Shibboleth 2.4 as with Office365.  While a user can login
successfully to Office365, I cannot get Outlook or Activesync to work.
Using the Remote Connectivity Analyzer, I get a "Metadata Exchange URL"
error when testing SSO and a "http 401 Unauthorized response" error when
testing Activesync.

 

I am wondering if this is because the ECP is not entirely enabled.

 

I found this as a possible additional configuration (to be added to the
web.xml file) that isn't published with the "Configuring Shibboleth for
SSO with Office365" documentation:

 

<security-constraint>

      <display-name>Shibboleth IdP</display-name>

      <web-resource-collection>

          <web-resource-name>ECP</web-resource-name>

          <url-pattern>/profile/SAML2/SOAP/ECP</url-pattern>

          <http-method>GET</http-method>

          <http-method>POST</http-method>

      </web-resource-collection>

      <auth-constraint>

          <role-name>*</role-name>

      </auth-constraint>

      <user-data-constraint>

          <transport-guarantee>CONFIDENTIAL</transport-guarantee>

      </user-data-constraint>

  </security-constraint>

 

  <login-config>

      <auth-method>BASIC</auth-method>

      <realm-name>ShibUserPassAuth</realm-name>

  </login-config>

 

<!-- Depending on the version of tomcat in use, you may also need this -
a list of security roles referenced by this web application -->

 

<security-role>

    <description>The role that is required to access the ECP
area</description>

    <role-name>*</role-name>

</security-role>

 

Does anyone think this may be my problem? Looking at the web.xml file I
am not entirely sure where this belongs.

 

Dennis Casimiro, P.E., LEED GA

Vice President, IT Administrator

 

Bornquist, Inc.

7050 N. Lehigh Ave.

Chicago, IL  60646

T:  773.774.2800

F:  773.763.6534

E-mail:  dcasimiro at bornquist.com <mailto:dcasimiro at bornquist.com>  

 

  <http://www.bornquist.com/BQ_hvac.php> 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130911/4e3cd219/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/jpeg
Size: 31708 bytes
Desc: image001.jpg
Url : http://shibboleth.net/pipermail/users/attachments/20130911/4e3cd219/attachment-0001.jpe