Office 365 ECP Issues

[Lalith Jayaweera]

Thanks Scott

you mean something like below, but same failure result ....with
authentication issue

  <bean parent="RelyingPartyByName"
 c:relyingPartyIds="urn:federation:MicrosoftOnline">
            <property name="profileConfigurations">
                <list>
         <bean parent="SAML2.SSO" p:encryptAssertions="false"
p:signAssertions="true" p:signResponses="false" p:encryptNameIDs="false" />
         <bean parent="SAML2.ECP" p:encryptAssertions="false"
p:signAssertions="true" p:signResponses="false"
p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"
*p:authenticationFlows="#{{'RemoteUserInternal*'}}" />
                </list>
            </property>
        </bean>


On Tue, Jul 18, 2017 at 12:08 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 7/17/17, 9:49 PM, "users on behalf of Lalith Jayaweera" <
> users-bounces at shibboleth.net on behalf of ljayaweera at gmail.com> wrote:
>
> > Do we have to do any other configuration to ECP to enforce remote_user
>
> You'd probably have to specify something in the ECP profile bean to get it
> to pick that login flow instead of whatever you're doing with CAS, such as
> p:authenticationFlows="#{{'RemoteUserInternal'}}"
>
> I would still dump Apache from this and just configure the Password flow
> instead, you have much more control that way and a simpler setup.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170718/12f504ef/attachment.html>