Microsoft Azure + AD FS 3 + Shibboleth IdP v3

[Cantor, Scott]

> I order to do this you need to configure a proxy SP in front of your
> shib IDP and configure your ADFS to trust that proxy SP. I'm not sure
> if shib v3 supports SAML authentication (i.e has a proxy module) but
> it should not be impossible.

No, other way around. If they want to use Shibboleth as the IdP and ADFS as the proxy hop, ADFS is just an SP, nothing unusual about it.

There is nothing provided here for anybody to go on. If you don't understand the logs, you can ask a specific question, but if your problem is ADFS' lack of logging or debugging, well, you know where Microsoft lives.

-- Scott