ECP Practical issue

[Matthew Slowe]

On 04/11/2015, 05:07, "users on behalf of lalith jayaweera" <users-bounces at shibboleth.net on behalf of j_lalith at hotmail.com> wrote:


> Hi,
> 
>as we know in apache for standard basic ECP configuration we got the below block in apache to authenticate against LDAP.
> 
>However my question is, when ECP works with Office365, only local part of UPN becomes the username for ECP, that is if my UPN is
>mysamplename at test.x.y.z only
>mysamplename <mailto:mysamplename at test.x.y.z> because the username for below block, which is not the full email.
> 
>Given that password is same as UPN, and considering test.x.y.z is a constant for all the students, is there any way to still use below email to authenticate.
> 
>Even though not a direct shib question, I thought some may have encountered the same issue in ship-office 365 integration.
> 
>  <Location /idp/profile/SAML2/SOAP/ECP>
>                AuthType Basic
>                AuthName "ECP profile"
>                AuthzLDAPAuthoritative Off
>                AuthBasicProvider ldap
>                AuthLDAPURL "ldap://sampleldap.ext1/dc=x,dc=y,dc=z?mail"
>                AuthLDAPBindDN "cn=testadmin,cn=testadmin,cn=config"
>                AuthLDAPBindPassword "samplepassword1"
>                Require valid-user
>    </Location>

Hi,

Your config is pretty much exactly what we have in place in production and it’s working fine.

Was there something not working or did you think it wouldn’t for some reason?

Matthew