Office 365 ECP Issues

[Matthew Slowe]

On 11/07/2017 07:19, Lalith Jayaweera wrote:
> I configured the office 365 in IdP 3.3.x and mail (Web profile) works
> with no issues,
> 
> However, ECP does not seem to work. Mobile phone mail setup....
> 
> Given same DNS of IdP, no change done in microsoft end.
> 
> However when I try ECP via mobile phone, I can't see any logs in IdP, as
> if like not hit to IdP
> 
> Is there any way to track down or run some test clients to see where the
> blockage is?

There weren't any simple ways to diagnose ECP issues last time I looked.

I've published a simpleish way to make an ECP request into your IDP
(taking Microsoft out of the loop) to check it's issuing a useful response:

https://github.com/unikent-ms1/simple-soap-ecp-test

Something to check is that the certificate in use on the HTTPS endpoint
matches the signing certificate registered with Office365 for the IDP
*and* is signed/validated by a mainstream CA (I think if Internet
Explorer is happy with it then it should be fine).

-- 
Matthew Slowe | Server Infrastructure Officer
IT Infrastructure, Information Services, University of Kent
Room S21, Cornwallis South
Canterbury, Kent, CT2 7NZ, UK
Tel: +44 (0)1227 824265

www.kent.ac.uk/is | @UnikentUnseenIT | @UKCLibraryIt
PGP: https://keybase.io/fooflington