Office 365 -> ADFS ->Shibboleth iOS problems?

[Klingenstein, Nate]

No, I don't know how the Apple mail app works but I presume that it is using the WS-Trust version of ECP or artifact binding. This is similar to how older versions of Outlook worked where the app itself prompts for creds and then sends them as part of session initiation (protected by SSL/TLS of course).

It was, as far as I could tell, still doing ECP-spoofing here.

The queries come in directly from Microsoft.  Outlook on iPhone worked fine, but Apple Mail didn't work on iPhone or Mac OS X.  We had no issues with a broken ECP except that.

I'm pretty sure it's configurable by IdP name.  Microsoft maintains a mapping of domains to protocols and IdP's.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160817/e7e73df9/attachment.html>