Office 365 -> ADFS ->Shibboleth iOS problems?

[Cantor, Scott]

On 8/17/16 5:36 PM, Eric Kool-Brown wrote:
> 
> We are running ADFS 2.0 so I would be surprised if it recognized the new
> MS-PKAP header and acted on it, but perhaps this was added via an update.

Doesn't seem likely any other SAML IdP products would understand it either.

You mentioned OneDrive, and I seem to recall that it was mentioned as an
outlying / non-functional part of the picture when I spoke to Microsoft
recently, but the OP seemed to be saying all their apps there weren't
working.

Since we're discussing it, can you explain to me how login from non-MS
mail clients (e.g. Apple Mail on iOS) works if you federate with ADFS
(with or without Shibboleth)?

I know with Shibboleth you probably would have to do the ECP proxy
thing, but do they actually support this via WS-Trust with ADFS natively
to avoid that?

-- Scott