authn for O365 desktop applications

[Michael A Grady]

On Jun 13, 2014, at 8:55 AM, Cantor, Scott <cantor.2 at OSU.EDU> wrote:

> On 6/12/14, 1:12 PM, "Rob Gorrell" <rwgorrel at uncg.edu> wrote:
> 
>> I just got done going through the implementation guide and technet
>> articles to hook our shibb idp up against our Office 365 domain. And
>> while its great to have SSO against the web portal/web apps, I've
>> understood we don't have parity between SAML and WS Fed in all aspects of
>> O365, but heard several times to expect that to occur in "late 2014".
>> Specifically what I'm curious about is the the ProPlus licensing
>> activation for the desktop apps and the Lync desktop client. Does anyone
>> know more about this? I know with adding ECP we pick up the Outlook
>> desktop client and mobile clients... Does anyone know if the future
>> solution for the desktop apps and client client will require ECP or be
>> something else?
> 
> They have claimed it will now be web based and support SAML in the future,
> but I don't know if that's true or when. It's not going to be ECP, it will
> be a browser hack.
> 
> -- Scott
> 

Brian Arkills at U Washington had pointed some of us to the following, which gives you a sense of the plans and timing on the Microsoft side.
---

See http://ignite.office.com/webcasts/office-365-sign-in-with-multi-factor-authentication
 
At ~34:10, Paul discusses future plans to update office 2013 “fat clients” to support MFA, leveraging ADAL & OAuth to bridge to SAMLp/WS-F* for federated authentication providers. If you watch it a bit, they show the flow in a pretty decent amount of detail, which is pretty unusual for an unreleased capability.

--
Michael A. Grady
Senior IAM Consultant, Unicon, Inc.