Office365 ECP broken after shib3 upgrade

[Klingenstein, Nate]

I didn't consider a whole O365 domain being tested, but sure.

When an application gets that big, people start to take it much more seriously.  I wouldn't have anticipated it if I hadn't run into deployers doing it repeatedly.

Reading what Ryan wrote, yes, that's probably the proxy caching success. It likely just caches a hash indicator saying that a hash of a given password worked.

Could totally be.  We're back on the yellow brick road.

G'nite and sorry for the spam.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161018/481132f6/attachment-0001.html>