Office 365 and Shibboleth integration

[Matthew Slowe]

On Tue, Aug 19, 2014 at 09:00:49AM +1200, Farzan Qureshi wrote:
>    08:58:43.291 - WARN
>    [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:491]
>    - No attribute of principal 'testuser' can be encoded in to a
>    NameIdentifier of required format
>    'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent' for relying party
>    'urn:federation:MicrosoftOnline'
> 
>    Any ideas?

I needed to add the following attribute to the RelyingParty tag for
MicrosoftOnline:

	nameIDFormatPrecedence="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"

See http://blogs.kent.ac.uk/unseenit/2013/05/10/office-and-shibboleth-2/
for more details.

Hope that helps,
-- 
Matthew Slowe
Server Infrastructure Team	e: m.slowe at kent.ac.uk
IS, University of Kent		t: +44 (0)1227 824265
Canterbury, UK			w: www.kent.ac.uk