Office 365 -> ADFS ->Shibboleth iOS problems?

[Cantor, Scott]

On 8/17/16 6:02 PM, Eric Kool-Brown wrote:
> Hi Scott,
> 
> No, I don't know how the Apple mail app works but I presume that it is using
> the WS-Trust version of ECP or artifact binding.

Mail clients wouldn't know how to do that. So they must be proxying the
password to Microsoft, and it's exactly like the ECP case, just WS-Trust
instead of ECP. I was just curious. People don't seem to mention that MS
is getting their passwords in the ADFS case.

It's hard to argue for federation very strongly when the end result is
them getting your passwords either way. Unless you manage to block use
of mobile mail clients I guess.

-- Scott