Microsoft O365 with Shib IDP

[Rob Gorrell]

UW captured a pretty good comparison:
2FA options analysis for O365/AAD - Microsoft Infrastructure - UW-IT Wiki
(washington.edu)
<https://wiki.cac.washington.edu/pages/viewpage.action?pageId=88119974>
but the short of it is, yes, there will be certain things you give up
(especially in the endpoint device arena) available to local auth/ADFS that
aren't possible with SAML federation. This is one of the reasons we moved
from Shibboleth federation with Azure to password hash sync.

-Rob


On Tue, Nov 3, 2020 at 11:04 AM Hong Ye <hy93 at cornell.edu> wrote:

> Hello,
>
>
>
> We are considering switching O365 login from ADFS to Shibboleth IDP. We
> don’t know if this change will break authentication to Microsoft Intune and
> Microsoft Mobile device management. Does anyone have experience with that?
>
>
>
> Thanks,
>
> Hong Ye
>
> Identity Management
>
> Cornell University
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>


-- 
Robert W. Gorrell
IT Manager, Identity and Access Management
University of NC at Greensboro
336-334-5954
PGP Key ID B36DB0CA
https://orcid.org/0000-0003-0158-8187
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20201103/3946c634/attachment.htm>