Office365 and Shibboleth 3 idp SSO

[Cantor, Scott]

On 10/3/16, 9:34 AM, "users on behalf of Walter Forbes Hoehn (wassa)" <users-bounces at shibboleth.net on behalf of wassa at memphis.edu> wrote:

> My experience, however, was that I had to use “urn:oasis:names:tc:SAML:2.0:named
>-format:persistent” to get it working. Instead of defining a new format, MS overloaded this
> format definition to carry its “ImmutableId.”

In which case the only workaround is to create a custom generator bean for that format with an activationCondition referencing the Office 365 relying party name, probably one that's attribute-sourced like the email-based example in the file now.

-- Scott