Session Logout link

[Cantor, Scott]

On 8/19/14, 10:14 PM, "Farzan Qureshi" <fqureshi at rosmini.school.nz> wrote:
>
>Ok first thing first. I was working with ADFS to federate our domain with
>office365. However there were several issues related to it. We planned to
>move from it to Shibboleth. We have completely remove ADFS role from the
>system. We have also uninstalled Microsoft
> ADFS update  - installed under Programs and features (in control panel).
>So now ADFS is completely gone!

What does that have to do with Office 365? How would it know anything
about what you did or didn't do on your own server? If it's been told to
use ADFS and the only way to fix that is by doing what he has told you to
do, then I guess that's what you have to do.

>Now the issue about metadata file. I have following in our
>relying-party.xml
>That is the reason I am talking about SAML i.e. FederationMetaDataUrl.

What does Shibboleth's own configuration have to do with a setting inside
Office 365? The answer is nothing.

>My understanding is that having FederationMetadataUrl defines which
>metadata to read and then follow the links mentioned in it, isn't it?

Apparently that isn't how Office 365 works. If it doesn't support metadata
for SAML, then that's the reality. It sounds to me like the very fact that
it's asking for a URL for metadata is apparently a sign that your service
is not set up to use SAML, but WS-Federation.

>I have made federation changes couple of times from Managed to federated
>as you have suggested but that FederationMetadataUrl comes back each time
>I federate and supply federation commands in one go. It comes
>automatically.

He told you that "federated" in their speak does not mean SAML. So you're
essentially repeating the same error over and over again. He didn't tell
you, ever, to change from managed to federated. Seemed like he said the
opposite to me.

>I have also restarted the system to start again after removing ADFS role
>and dependencies (updates).

How does restarting your system impact theirs? It can't.

-- Scott