Shibboleth ECP and Office 365

[Cantor, Scott]

> My concern with this is that Microsoft indicated to us that they send the full
> userprincipalname. We did everything to log including wiresharking the traffic
> and seeing only the username portion of the UPN being sent in the traffic
> dump. I’ve contacted MS support regarding this issue and they claim we’re
> doing something to the UPN.

If you wireshark the HTTP request (plus ssldump I guess?) and the basic-auth header contains a particular value, there's no ambiguity about who's sending it.

-- Scott