<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 12-11-03 3:43 PM, Mauro Minella
wrote:<br>
</div>
<blockquote
cite="mid:29E7B8530496AB4089D46F3537AF3A2EB80812@DB3EX14MBXC325.europe.corp.microsoft.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Lucida Console";
panose-1:2 11 6 9 4 5 4 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 2.0cm 2.0cm 2.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">However, on the client
side it seems that the user is NOT authenticated because the
username/password dialog box keeps being presented.</span></p>
</div>
</blockquote>
<blockquote
cite="mid:29E7B8530496AB4089D46F3537AF3A2EB80812@DB3EX14MBXC325.europe.corp.microsoft.com"
type="cite">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US"><o:p></o:p></span></p>
<span lang="EN-US"><o:p></o:p></span>
<p class="MsoNormal"><span lang="EN-US">20:05:42.858 - INFO
[Shibboleth-Audit:989] -
20121103T190542Z|urn:oasis:names:tc:SAML:2.0:bindings:SOAP|_8c62ad9c-52bf-448c-bf97-2d60b9d51c8a|urn:federation:MicrosoftOnline|urn:oasis:names:tc:SAML:2.0:profiles:SSO:ecp|<a class="moz-txt-link-freetext" href="https://shibbidp.eduteamit.com/idp/shibboleth">https://shibbidp.eduteamit.com/idp/shibboleth</a>|urn:oasis:names:tc:SAML:2.0:bindings:SOAP|_dd9639a0044b3825230446ed3501dd58|mark.twain||transientId,eduPersonScopedAffiliation,UserId,eduPersonTargetedID.old,ImmutableID,eduPersonTargetedID,|_1e62f11837be4ed0a01df02b68f521af|_74f97d433963aadfb9aa72e2400ee844,|<o:p></o:p></span></p>
</div>
</blockquote>
<br>
Check the attributes for mark.twain in O365 and confirm you're
passing the right UserId and ImmutableID. Based on your log above,
his ImmutableID in O365 should be "<span lang="EN-US">_1e62f11837be4ed0a01df02b68f521af",
ie:</span><br>
<br>
---<br>
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
<pre class="code powershell|">PS<span class="sy0">></span> Get<span class="sy0">-</span>MsolUser <span class="sy0">-</span>UserPrincipalName <span class="st0">"${mark.twain's UPN}"</span><span class="sy0">|</span>fl
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">ExtensionData : System.Runtime.Serialization.ExtensionDataObject
AlternateEmailAddresses : <span class="br0">{</span><span class="br0">}</span>
BlockCredential : False
City :
Country :
Department :
DisplayName : Mark Twain
Errors :
Fax :
FirstName : Mark
ImmutableId : <span lang="EN-US">_1e62f11837be4ed0a01df02b68f521af</span>
IsBlackberryUser : False
IsLicensed : True
LastDirSyncTime :
LastName : Twain
LicenseReconciliationNeeded : False
Licenses : <span class="br0">{</span>somedomain:STANDARDWOFFPACK_STUDENT<span class="br0">}</span>
LiveId : 1003000082D67C07
MobilePhone :
ObjectId : 24c7fdfe<span class="sy0">-</span>12b4<span class="sy0">-</span>4bf9<span class="sy0">-</span>b6ea<span class="sy0">-</span>ee019cb99e6f
Office :
OverallProvisioningStatus : Success
PasswordNeverExpires : False
PhoneNumber :
PortalSettings :
PostalCode :
PreferredLanguage :
ProxyAddresses : <span class="br0">{</span><a class="moz-txt-link-freetext" href="smtp:mark.twain@somedomain.com">smtp:mark.twain@somedomain.com</a><span class="sy0">,</span> SM
<a class="moz-txt-link-abbreviated" href="mailto:TP:mark.twain@somedomain.com">TP:mark.twain@somedomain.com</a><span class="br0">}</span>
SoftDeletionTimestamp :
State :
StreetAddress :
StrongPasswordRequired : True
Title :
UsageLocation : CA
UserPrincipalName : ${mark.twain's UPN}
ValidationStatus : Healthy<pre class="code powershell|"></pre></pre>
---<br>
</body>
</html>