authn for O365 desktop applications

[Dave Perry]

Maybe they're subtlely hoping people looking at their solution will say, if they don't agree with it, 'look that's wrong and we need it to do this and maybe this way .... would be better'?

_________________________________________________
Dave Perry
eLearning Technologist, Hull College Group

Room L34 - Queens Gardens Library
Wilberforce Drive, Queen's Gardens, Hull, HU1 3DG
Extension 2230 / Direct Dial 01482 381930

Please rate our service in the annual Libraries & eLearning User survey.
You could win a £15 Amazon voucher!
For staff - http://library.hull-college.ac.uk/staffsurvey 
For students - http://library.hull-college.ac.uk/survey 

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Michael A Grady
Sent: 13 June 2014 19:32
To: Shib Users
Subject: Re: authn for O365 desktop applications


On Jun 13, 2014, at 8:55 AM, Cantor, Scott <cantor.2 at OSU.EDU> wrote:

> On 6/12/14, 1:12 PM, "Rob Gorrell" <rwgorrel at uncg.edu> wrote:
> 
>> I just got done going through the implementation guide and technet 
>> articles to hook our shibb idp up against our Office 365 domain. And 
>> while its great to have SSO against the web portal/web apps, I've 
>> understood we don't have parity between SAML and WS Fed in all 
>> aspects of O365, but heard several times to expect that to occur in "late 2014".
>> Specifically what I'm curious about is the the ProPlus licensing 
>> activation for the desktop apps and the Lync desktop client. Does 
>> anyone know more about this? I know with adding ECP we pick up the 
>> Outlook desktop client and mobile clients... Does anyone know if the 
>> future solution for the desktop apps and client client will require 
>> ECP or be something else?
> 
> They have claimed it will now be web based and support SAML in the 
> future, but I don't know if that's true or when. It's not going to be 
> ECP, it will be a browser hack.
> 
> -- Scott
> 

Brian Arkills at U Washington had pointed some of us to the following, which gives you a sense of the plans and timing on the Microsoft side.
---

See http://ignite.office.com/webcasts/office-365-sign-in-with-multi-factor-authentication
 
At ~34:10, Paul discusses future plans to update office 2013 "fat clients" to support MFA, leveraging ADAL & OAuth to bridge to SAMLp/WS-F* for federated authentication providers. If you watch it a bit, they show the flow in a pretty decent amount of detail, which is pretty unusual for an unreleased capability.

--
Michael A. Grady
Senior IAM Consultant, Unicon, Inc.

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

**********************************************************************
This message is sent in confidence for the addressee
only. It may  contain confidential or sensitive
information.  The contents are not to be disclosed
to anyone other than the addressee.  Unauthorised
recipients are requested to preserve this
confidentiality and to advise us of any errors in
transmission.  Any views expressed in this message
are solely the views of the individual and do not
represent the views of the College.  Nothing in this
message should be construed as creating a contract.

Hull College owns the email infrastructure, including the contents.

Hull College is committed to sustainability, please reflect before printing this email.
**********************************************************************

TEXT