off-topic help for Office 365 -- Solved

[Paul Hethmon]

So here’s the solution, don’t have a typo in any parameters, the MS software will just fail:

PS C:\Users\Administrator\Desktop> Set-MsolDomainAuthentication -DomainName $dom -FederationBrandName $dom -Authentication Federated -PassiveLogOnUri $url -SigningCertificate $cert -IssuerUri $uri -ActiveLogOnUri $ecpUrl -LogOffUri $logouturl -PreferredAuthenticationProtocol SAMLP -Verbose -Debug

Confirm
Unable to complete this action. Try again later.
[Y] Yes  [A] Yes to All  [H] Halt Command  [S] Suspend  [?] Help (default is "Y"): y
Set-MsolDomainAuthentication : Unable to complete this action. Try again later.
At line:1 char:29
+ Set-MsolDomainAuthentication <<<<  -DomainName $dom -FederationBrandName $dom -Authentication Federated -PassiveLogOnUri $url -SigningCertificate $cert -IssuerUri $uri -ActiveLogOnUri $ecpUrl -LogOffUri $logouturl -PreferredAuthenticationProtocol SAMLP -Verbose -Debug
    + CategoryInfo          : OperationStopped: (:) [Set-MsolDomainAuthentication], MicrosoftOnlineException
    + FullyQualifiedErrorId : Microsoft.Online.Administration.Automation.InternalServiceException,Microsoft.Online.Adm
   inistration.Automation.SetDomainAuthentication

PS C:\Users\Administrator\Desktop> echo $logouturl
https:/idp.clareitysecurity.info/idp/logout.jsp
PS C:\Users\Administrator\Desktop> $logouturl="https://idp.clareitysecurity.info/idp/logout.jsp"
PS C:\Users\Administrator\Desktop> echo $logouturl
https://idp.clareitysecurity.info/idp/logout.jsp
PS C:\Users\Administrator\Desktop> Set-MsolDomainAuthentication -DomainName $dom -FederationBrandName $dom -Authentication Federated -PassiveLogOnUri $url -SigningCertificate $cert -IssuerUri $uri -ActiveLogOnUri $ecpUrl -LogOffUri $logouturl -PreferredAuthenticationProtocol SAMLP -Verbose -Debug
PS C:\Users\Administrator\Desktop>

If you look closely at the value for the variable $logouturl, you will see the first instance is missing a slash. I had been running these commands by copying from a text file on my laptop where I staged everything so I wouldn’t make typos in PowerShell. There is a certain irony to that.

So the lesson learned here is that Microsoft can recognize garbage but will never tell you.

cheers,

Paul

-----
Paul Hethmon
Chief Software Architect
paul.hethmon at clareitysecurity.com