Second Office365 Domain requires different "Issuer URI"

fffkkk florent.krieg at sewan.fr
Mon Mar 25 10:56:57 EDT 2019


Hello Adam and everybody,

We have tried the inline script solution that you offered and it indeed
'mostly' works :)

I'm explaining: 
The first time we connect to Office.com, we get redirected to our (gluu)
login interface, and after we enter our credentials we get rejected by
Microsoft (it says 'Requested federation realm object ... does not exist',
because it replies the default value - I guess the morid is missing
there?!). 

However, if we refresh the page or if we try again to login, it will work
perfectly. 

I have made some capture and debug log analysis, and I assume the parameter
does not get proxied in the case of a SubFlow triggering an external
transfer of flow authn/RemoteUser.

I'm not super at-ease with sso in general, but I don't feel like I'm far
from getting it working.
If anybody could help us giving an hint on how to move forward, that'd be
great though :)

(In parallel I'm trying to implement a responderIdLookupStrategy in Java, as
mentioned by Harald earlier in the thread, but that seems heavier to
maintain as code would be altered in this case.)

Thanks!
Florent



--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html


More information about the users mailing list