Microsoft Azure + AD FS 3 + Shibboleth IdP v3

[Cantor, Scott]

> But really I can't see it being that different to setup than the notes here:
> https://wiki.shibboleth.net/confluence/display/SHIB2/MicrosoftInterop

Most of that is ADFSv2 era information, I couldn't say if anything has changed.

> Most of the configuration in that doco was on the ADFS side - not the
> Shibboleth side (shibboleth only needed metadata and attribute-release). I
> believe it's still the same SAML version between IdPv2 and v3 - so that should
> not cause problems.

It depends if you're trying to make MS understand "typical" SAML defaults from Shibboleth or have Shibboleth provide Microsoft's "creative" choices. But otherwise no, there's nothing significantly new with Shibboleth.

Either way, the log that was posted is basically just the IdP issuing a response to the ADFS system. If that's "wrong" then you have to know what ADFS thinks is wrong with it to go any further.

-- Scott