IdP v3 Relying Party Configuration

[Kevin Ratcliffe]

Hi

I'm trying to add Microsoft Office365 as a relying party. So far I've added the metadata and configured the required attributes and release policy. My IdP has been migrated to v3 rather than upgraded as I want to do things the v3 way. The Microsoft documentation is for IdPv2, and I'm a little bit confused as how to achieve the following v2 relying-party.xml snippet.

<!-- Azure AD -->
<rp:RelyingParty id="urn:federation:MicrosoftOnline"
                 provider="https://idp.contoso.com/idp/shibboleth"
                 defaultSigningCredentialRef="IdPCredential">
         
     <rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile"
                              signAssertions="conditional"
                              encryptAssertions="never"
                              encryptNameIds="never" />
             
</rp:RelyingParty>

I've read through https://wiki.shibboleth.net/confluence/display/IDP30/RelyingPartyConfiguration#RelyingPartyConfiguration-Overrides and it's making very little sense to me, sorry. The following is my best guess(don't laugh).

<bean parent="RelyingPartyByName" c:relyingPartyIds=""urn:federation:MicrosoftOnline"">
    <property name="profileConfigurations">
        <list>
            <bean parent="SAML2.SSO.Profile" p:signAssertions="conditional" />
            <bean parent="SAML2.SSO.Profile" p:encryptAssertions="never" />
            <bean parent="SAML2.SSO.Profile" p:encryptNameIds="never" />
        </list>
    </property>
</bean>

Am I on the right track with this?

Thanks for any advice or help.

Kevin Ratcliffe
Network & IT Systems Support
Bolton Sixth Form College
T: 01204 846215
E: kratcliffe at bolton-sfc.ac.uk
W: www.bolton-sfc.ac.uk
Save Paper. Please consider the environment before printing.