Shibboleth and office 365 True SSO

[Aaron Howell]

The main problem we had with completely auto login was being able to auto detect a supported workstation (one that would have a Kerberos ticket) - as being a university we have to support more students BYOD than staff machines

So there is also a Kerberos button on the User/Pass form - and an tick box to select Kerberos permanently - that will set a cookie. So when the user returns - kerberos is automatically attempted

We also have ADFS between shibboleth and Office365 - as at the time there was limited support from O365 for shibboleth direct (not sure how far this has changed)

Cheers
Aaron

> On 7 Jul 2015, at 4:04 am, Peter Schober <peter.schober at univie.ac.at> wrote:
>
> * David Gersic <dgersic at niu.edu> [2015-07-06 18:29]:
>> Yes? If so, note that while this is possible, it has a few
>> caveats. First, that you're going to be using ADFS and federating
>> your local domain with Office365. Second, that you're going to be
>> using IE. This ONLY works with IE, and requires that the user (or
>> you) make some local changes on the workstation to enable it.
>
> SPNEGO should work fine with Mozilla Firefox, Chromium/Chrome and
> Safari, too, AFAIK.
>
> https://developer.mozilla.org/en-US/docs/Integrated_Authentication
> https://www.chromium.org/developers/design-documents/http-authentication
> https://discussions.apple.com/thread/2649921
>
> Safari is the only one to allow SPNEGO with any site w/o requiring
> configuration, AFAIR.
> -peter
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


Important Notice: The contents of this email are intended solely for the named addressee and are confidential; any unauthorised use, reproduction or storage of the contents is expressly prohibited. If you have received this email in error, please delete it and any attachments immediately and advise the sender by return email or telephone.

Deakin University does not warrant that this email and any attachments are error or virus free.