Issue with interoperability between ADFS 2016 and Shibboleth 2.4.4
Peter Schober
peter.schober at univie.ac.at
Tue Nov 21 10:47:53 EST 2017
* Alvarez, Dyana I <d.alvarez2 at miami.edu> [2017-11-21 16:21]:
> WE have a load balancer that is fronting ADFS. In the LB we have an
> iRule that appends the cookie MSIPIPSelectionPersistent with a value
> in the HTTP header.
[...]
> In our test environment, the iRule does not work with the active
> connections (Smarphones outlook/exchange app for email) but it works
> fine with a browser (passive)
[...]
> However, the app for outlook when adding a new account, gives an error in ADFS.
>
> Can someone out there have done ADFS 2016 with Shibboleth interoperability before?
I don't see anything at all here that remotely relates to "Shibboleth
interoperability" or "Shibboleth 2.4.4".
This all seems to be about you injecting HTTP Cookies and ADFS not
reacting to those Cookies as you expect?
(And not that it matters for this issue, but IDP 2.4.4 suffers from
security vulnerabilities and the only supported stable version
currently is 3.3.2:
https://wiki.shibboleth.net/confluence/display/SHIB2/SecurityAdvisories)
-peter
More information about the users
mailing list