Second Office365 Domain requires different "Issuer URI"

[Lalith Jayaweera]

Hi,

Are you telling query param not propagated and getting cutting off?

Also I how did you refer to the inline script via
postAuthenticationFlowsLookupStrategy-ref   ?

Certainly java solution is the last option? I am waiting on a tenant to try
the same, I will share my experience as well, not sure when

Thanks




On Tue, Mar 26, 2019 at 1:57 AM fffkkk <florent.krieg at sewan.fr> wrote:

> Hello Adam and everybody,
>
> We have tried the inline script solution that you offered and it indeed
> 'mostly' works :)
>
> I'm explaining:
> The first time we connect to Office.com, we get redirected to our (gluu)
> login interface, and after we enter our credentials we get rejected by
> Microsoft (it says 'Requested federation realm object ... does not exist',
> because it replies the default value - I guess the morid is missing
> there?!).
>
> However, if we refresh the page or if we try again to login, it will work
> perfectly.
>
> I have made some capture and debug log analysis, and I assume the parameter
> does not get proxied in the case of a SubFlow triggering an external
> transfer of flow authn/RemoteUser.
>
> I'm not super at-ease with sso in general, but I don't feel like I'm far
> from getting it working.
> If anybody could help us giving an hint on how to move forward, that'd be
> great though :)
>
> (In parallel I'm trying to implement a responderIdLookupStrategy in Java,
> as
> mentioned by Harald earlier in the thread, but that seems heavier to
> maintain as code would be altered in this case.)
>
> Thanks!
> Florent
>
>
>
> --
> Sent from:
> http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190326/15caca9e/attachment.html>