Office 365, Student Advantage and Shibboleth Question

[Aaron Howell]

We’re also running ADFS - but in front of shibboleth.

Web based authentication (WS-Federation) goes off to the Shibboleth IdP (to give that SSO goodness). Fat client (WS-Trust) authenticates off of AD. Attribute lookup is done in AD for both.

Some details on setting it up: https://wiki.shibboleth.net/confluence/display/SHIB2/MicrosoftInterop

Recently there was a bug introduced with iOS clients no longer being Fat clients but doing some weird SAML stuff - we’ve had to work around that by detecting those clients and letting them auth directly in ADFS for WS-Federation.

Cheers
Aaron


> On 13 Jan 2015, at 3:05 am, David Gersic <dgersic at niu.edu> wrote:
>
> We're running ADFS alongside Shibboleth here, on the theory that MS would support that with the fat clients before it would support anything else. It sort of does, but not really. Outlook works. Lync can be abused in to working, sort of. OneDrive doesn't. Mobile clients sort of do, but depends on the exact mobile client and platform and current phase of the moon. I suspect this is client related, not SAML related, so Shibboleth vs. ADFS doesn't really matter very much.
>
> ________________________________________
> From: users-bounces at shibboleth.net <users-bounces at shibboleth.net> on behalf of Eric Dover <edover at ksu.edu>
> Sent: Friday, January 09, 2015 7:07 PM
> To: users at shibboleth.net
> Subject: Office 365, Student Advantage and Shibboleth Question
>
> Hi All,
>
> For those of you that are using Office 365 and have Shibboleth on campus, I was wondering how you were providing access to Student Advantage/Office 365 ProPlus and fat client (mobile apps, Lync, OneDrive, etc...) authentication?
>
> Any information would be greatly appreciated.
>
> Thanks a bunch in advance.
> Eric
>
> .:*~*:._.:*~*:._.:*~*:._.:*~*:._.:*~*:._.:*~*:._.:*~*:.
> Eric Dover
> Manager, Client Services
> Information Technology Assistance Center (iTAC)
> Kansas State University
> Hale 212
> Manhattan, KS. 66506
> edover at ksu.edu
> 785.532.4785
> .:*~*:._.:*~*:._.:*~*:._.:*~*:._.:*~*:._.:*~*:._.:*~*:.
> Status of ITS resources can be found at http://www.k-state.edu/its/status/
> K-State IT Status Twitter feed can be found at https://twitter.com/KStateITstatus
> IT News blog can be found at https://blogs.k-state.edu/it-news/
> .:*~*:._.:*~*:._.:*~*:._.:*~*:._.:*~*:._.:*~*:._.:*~*:.
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


Important Notice: The contents of this email are intended solely for the named addressee and are confidential; any unauthorised use, reproduction or storage of the contents is expressly prohibited. If you have received this email in error, please delete it and any attachments immediately and advise the sender by return email or telephone.

Deakin University does not warrant that this email and any attachments are error or virus free.