Shibboleth and office 365 True SSO

[Rod Widdowson]

Brent,

> My question is can Shibboleth provide our active directory environment
domain users with true seamless sign on to office 365 and in particular the
outlook web app? 

Do you mean:
1) User logs into computer on AD
2) User fires up IE
3) User approaches O365
4) User does *not* have to sign in to the School Shibboleth IdP
5) User is now logged in to O365

If so then you are (technically) asking for two things

A)  "SPNEGO" authentication (this is what makes Stage 4 go away)
B) O365 SAML Integration

I have no personal experience of either of these but I know a lot of people
on this list have made (B) work.  

As for (A): For V2.X I know that Cal Racey at the university of Newcastle
has done a lot of stuff (based on the SWITCH work) and has written this up.
I do not have the reference to hand, maybe someone else does, but searching
for "Shibboleth SPNEGO site:ncl.ac.uk" throws up some useful hits.
https://crypt.ncl.ac.uk/login-gateway/docs/Shibboleth_SPNEGO_Setup.pdf looks
hopeful.  

For V3.X I believe that this is under development, just not by the
Shibboleth developers.

If you go down this track I'd strongly suggest that you approach each
problem separately.

/Rod