off-topic help for Office 365

[Paul Hethmon]

On Feb 17, 2016, at 4:14 PM, David Gersic <dgersic at niu.edu<mailto:dgersic at niu.edu>> wrote:

I know a little bit about Office365, and a little bit about Shib. Does "had it working" mean that you successfully federated your Office365 tenant with your local Shibboleth IdP? No other things like ADFS being involved?

No ADFS involved. Our primary product here at Clareity is an IAM system. So I federated to my IAM system via Shibboleth/SAML.


If so, does "had" mean that you ran the PowerShell commands to un-federate your tenant and have being using Office365's native authentication? If so, did that un-federate actually complete successfully? If it didn't, then you may be hitting an error trying to federate a tenant that thinks that it is already federated.

This actually bit me to start, but I unfederated it. To really make sure, I removed that original domain from Office365 entirely and added the new one. I also have the “onmicrosoft.com<http://onmicrosoft.com>” domain set as the default since you can’t federate a domain that is the default in O365.



-----
Paul Hethmon
Chief Software Architect
paul.hethmon at clareitysecurity.com<mailto:paul.hethmon at clareitysecurity.com>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160217/be56842c/attachment.html>