iOS + Adfs + Shibboleth IDP

Rhian Resnick rresnick at fau.edu
Wed Apr 8 21:03:58 EDT 2015


Evening,
Our ADFS and Shibboleth integration saga continues. Our users are reporting issues using iOS and Android Office 365 (word, excel, etc) when connecting to ADFS and we are receiving the following error in the ADFS log.
The authority key for certdata 'http://schemas.microsoft.com/ws/2009/12/identityserver/selfauthority' was invalid and will not be added to the authorityCache

Microsoft directed us to the following page but we found it less then helpful. Basically we are doing some odd and it is Shibboleth's fault. Has anyone had this issue with ADFS 2.0?


Issue 1: "Unknown Auth method" message when you try to sign in to an Office app for iOS or Mac

This error can occur in a topology where an enterprise has federated an AD FS server with Azure Active Directory for signing in to Office 365, and further federated the AD FS server with another non-Microsoft federation server such as Shibboleth. When Mac and iOS Office applications sign in, Azure Active Directory sends a parameter in the sign-in request to AD FS that requests forms authentication. When AD FS relays this request to the non-Microsoft federation server, it may be unable to interpret this parameter and it may display an error to the user, even before they are asked to sign in.

To resolve this issue, contact the provider of your non-Microsoft federation server.


http://support.microsoft.com/en-us/kb/3015526

How to troubleshoot issues that you encounter when you sign in to Office apps for Mac, iPad, iPhone, or iPod Touch when using Active Directory Federation Services
Contains troubleshooting information that you can use when you have problems signing in to Office apps for Mac, iPad, iPhone, or iPod Touch when using Active Directory Federation Services (AD FS)
Read more...<http://support.microsoft.com/en-us/kb/3015526>



Thanks for any help in this matter,


Rhian Resnick

Assistant Director Middleware and HPC

Office of Information Technology?


?Florida Atlantic University

777 Glades Road, CM22, Rm 218

Boca Raton, FL 33431

Phone 561.297.2647

Fax 561.297.0222

 ?<https://hpc.fau.edu/wp-content/uploads/2015/01/image.jpg>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150409/afa9d1ef/attachment-0001.html 


More information about the users mailing list