Office365 and Shib (ADFSv3 and Shib v3)

[Mark Cairney]

Hi,

Just an update- it turns out with Shib3 and ADFSv3 the Shibboleth half
of the equation really is just as simple as "it's just another SP,
consume it's metadata and release attributes to it".

The ADFS side is a little bit more challenging as you need to do some
work to translate Shibboleth attributes into ADFS "claims".

In addition to the link I posted originally we've been referencing
information at:

https://wiki.shibboleth.net/confluence/display/IDP30/Office+365
and
https://blog.uvm.edu/jgm/2014/03/18/sharepoint-2013-adfs-shibboleth-the-motion-picture/

We do have some information written up in our team wiki but this isn't
public.

Kind regards,

Mark

On 11/05/16 14:35, Cantor, Scott wrote:
>> Has anyone successfully integrated Shib3 and ADFSv3?
> 
> Yes.
> 
>> The "best" documentation I've found so far is:
>> https://wiki.shibboleth.net/confluence/display/SHIB2/MicrosoftInterop#Mic
>> rosoftInterop-ADFSv3%282012r2%29
> 
> Which is not documentation, it's contributed material by deployers.
> 
>> One added complication is that we need to use the RemoteUser
>> authentication method as our Shib install is behind a separate SSO
>> system (CoSign). This means I'm not sure what do do (if anything) about
>> the authentication method change in the above docs.
> 
> It has nothing whatsoever to do with federating with any SAML SP, it's an IdP detail.
> 
> -- Scott
> 
> 

-- 
/****************************

Mark Cairney
ITI Enterprise Services
Information Services
University of Edinburgh

Tel: 0131 650 6565
Email: Mark.Cairney at ed.ac.uk
PGP: 0x435A9621

*******************************/

The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: OpenPGP digital signature
URL: <http://shibboleth.net/pipermail/users/attachments/20160513/7a455747/attachment-0001.sig>