<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Maybe somebody can spot an important difference in two responses being sent to Office365, web browser access is working, Outlook client is not.<div><br></div><div>I have the same policy set in relying-party.xml for the ECP profile and SSO profileconfigurations</div><div><br></div><div>If somebody could post a working SOAP response for Office365 that would help a lot</div><div><br></div><div><div><font class="Apple-style-span" face="Courier"><rp:RelyingParty id="urn:federation:MicrosoftOnline" provider="<a href="https://idp.your.edu.ie/idp/shibboleth">https://idp.your.edu.ie/idp/shibboleth</a>" defaultSigningCredentialRef="IdPCredential"></font></div><div><font class="Apple-style-span" face="Courier"><rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile"</font></div><div><font class="Apple-style-span" face="Courier"> signAssertions="conditional"</font></div><div><font class="Apple-style-span" face="Courier"> encryptAssertions="never"</font></div><div><font class="Apple-style-span" face="Courier"> encryptNameIds="never" /></font></div><div><font class="Apple-style-span" face="Courier"><rp:ProfileConfiguration xsi:type="saml:SAML2ECPProfile" </font></div><div><font class="Apple-style-span" face="Courier"> signAssertions="conditional" </font></div><div><font class="Apple-style-span" face="Courier"> encryptAssertions="never" </font></div><div><font class="Apple-style-span" face="Courier"> encryptNameIds="never"/></font></div><div><font class="Apple-style-span" face="Courier"></rp:RelyingParty></font></div><div><br></div><div>I've highlighted differences in bold text (apologies in advance to the plain text advocates)</div><div>====ACTVE=====</div><div><div><div><font class="Apple-style-span" face="Courier"><?xml version="1.0" encoding="UTF-8"?><soap11:Envelope xmlns:soap11="<a href="http://schemas.xmlsoap.org/soap/envelope/">http://schemas.xmlsoap.org/soap/envelope/</a>"></font></div><div><font class="Apple-style-span" face="Courier"> <soap11:Header></font></div><div><font class="Apple-style-span" face="Courier"> <ecp:Response xmlns:ecp="urn:oasis:names:tc:SAML:2.0:profiles:SSO:ecp" AssertionConsumerServiceURL="<a href="https://login.microsoftonline.com/login.srf">https://login.microsoftonline.com/login.srf</a>" soap11:actor="<a href="http://schemas.xmlsoap.org/soap/actor/next">http://schemas.xmlsoap.org/soap/actor/next</a>" soap11:mustUnderstand="1"/></font></div><div><font class="Apple-style-span" face="Courier"> </soap11:Header></font></div><div><font class="Apple-style-span" face="Courier"> <soap11:Body></font></div><div><font class="Apple-style-span" face="Courier"> <saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="<a href="https://login.microsoftonline.com/login.srf">https://login.microsoftonline.com/login.srf</a>" ID="_7326a1752a021f722d529a0e755965d7" InResponseTo="_9a1e870f-e814-4e2c-8cb4-d48c7028248b" IssueInstant="2013-04-18T15:42:37.411Z" Version="2.0"></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity"><a href="https://idp.your.edu.ie/idp/shibboleth</saml2:Issuer>">https://idp.your.edu.ie/idp/shibboleth</saml2:Issuer></a></font></div><div><font class="Apple-style-span" face="Courier"> <saml2p:Status></font></div><div><font class="Apple-style-span" face="Courier"> <saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></font></div><div><font class="Apple-style-span" face="Courier"> </saml2p:Status></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_e072ac1e519073781fe4bf1fe5b31c9f" IssueInstant="2013-04-18T15:42:37.411Z" Version="2.0"></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity"><a href="https://idp.your.edu.ie/idp/shibboleth</saml2:Issuer>">https://idp.your.edu.ie/idp/shibboleth</saml2:Issuer></a></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:Subject></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" NameQualifier="<a href="https://idp.your.edu.ie/idp/shibboleth">https://idp.your.edu.ie/idp/shibboleth</a>">g+WdVgjft0eVkOFHXhG+kQ==</saml2:NameID></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:SubjectConfirmationData Address="157.56.254.245" InResponseTo="_9a1e870f-e814-4e2c-8cb4-d48c7028248b" NotOnOrAfter="2013-04-18T15:47:37.411Z" Recipient="<a href="https://login.microsoftonline.com/login.srf">https://login.microsoftonline.com/login.srf</a>"/></font></div><div><font class="Apple-style-span" face="Courier"> </saml2:SubjectConfirmation></font></div><div><font class="Apple-style-span" face="Courier"> </saml2:Subject></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:Conditions NotBefore="2013-04-18T15:42:37.411Z" NotOnOrAfter="2013-04-18T15:47:37.411Z"></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:AudienceRestriction></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:Audience>urn:federation:MicrosoftOnline</saml2:Audience></font></div><div><font class="Apple-style-span" face="Courier"> </saml2:AudienceRestriction></font></div><div><font class="Apple-style-span" face="Courier"> </saml2:Conditions></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:AuthnStatement AuthnInstant="2013-04-18T15:42:37.404Z"></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:SubjectLocality Address="157.56.254.245"/></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:AuthnContext></font></div><div><font class="Apple-style-span" face="Courier"> <b><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></b></font></div><div><font class="Apple-style-span" face="Courier"> </saml2:AuthnContext></font></div><div><font class="Apple-style-span" face="Courier"> </saml2:AuthnStatement></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:AttributeStatement></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:Attribute FriendlyName="UserId" Name="IDPEmail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:AttributeValue xmlns:xs="<a href="http://www.w3.org/2001/XMLSchema">http://www.w3.org/2001/XMLSchema</a>" <b>xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>" </b>xsi:type="xs:string"><a href="mailto:gwearen@your.edu.ie">gwearen@your.edu.ie</a></saml2:AttributeValue></font></div><div><font class="Apple-style-span" face="Courier"> </saml2:Attribute></font></div><div><font class="Apple-style-span" face="Courier"> </saml2:AttributeStatement></font></div><div><font class="Apple-style-span" face="Courier"> </saml2:Assertion></font></div><div><font class="Apple-style-span" face="Courier"> </saml2p:Response></font></div><div><font class="Apple-style-span" face="Courier"> </soap11:Body></font></div><div><font class="Apple-style-span" face="Courier"></soap11:Envelope></font></div></div></div><div><font class="Apple-style-span" face="Courier"><br></font></div><div><font class="Apple-style-span" face="Courier">=====WEB=====</font></div><div><div><font class="Apple-style-span" face="Courier"><?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="<a href="https://login.microsoftonline.com/login.srf">https://login.microsoftonline.com/login.srf</a>" ID="_70619cfaf16e0616d58bb240af58b278" InResponseTo="_f00d78f6-f6dd-4d5f-89f4-4939234ff219" IssueInstant="2013-04-18T15:16:02.061Z" Version="2.0"></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity"><a href="https://idp.your.edu.ie/idp/shibboleth</saml2:Issuer>">https://idp.your.edu.ie/idp/shibboleth</saml2:Issuer></a></font></div><div><font class="Apple-style-span" face="Courier"> <saml2p:Status></font></div><div><font class="Apple-style-span" face="Courier"> <saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></font></div><div><font class="Apple-style-span" face="Courier"> </saml2p:Status></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_dc1fd0f58ee0c67d1eb095f49e13baf0" IssueInstant="2013-04-18T15:16:02.061Z" Version="2.0" xmlns:xs="<a href="http://www.w3.org/2001/XMLSchema">http://www.w3.org/2001/XMLSchema</a>"></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity"><a href="https://idp.your.edu.ie/idp/shibboleth</saml2:Issuer>">https://idp.your.edu.ie/idp/shibboleth</saml2:Issuer></a></font></div><div><font class="Apple-style-span" face="Courier"> <ds:Signature xmlns:ds="<a href="http://www.w3.org/2000/09/xmldsig#">http://www.w3.org/2000/09/xmldsig#</a>"></font></div><div><font class="Apple-style-span" face="Courier"> <ds:SignedInfo></font></div><div><font class="Apple-style-span" face="Courier"> <ds:CanonicalizationMethod Algorithm="<a href="http://www.w3.org/2001/10/xml-exc-c14n#">http://www.w3.org/2001/10/xml-exc-c14n#</a>"/></font></div><div><font class="Apple-style-span" face="Courier"> <ds:SignatureMethod Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#rsa-sha1">http://www.w3.org/2000/09/xmldsig#rsa-sha1</a>"/></font></div><div><font class="Apple-style-span" face="Courier"> <ds:Reference URI="#_dc1fd0f58ee0c67d1eb095f49e13baf0"></font></div><div><font class="Apple-style-span" face="Courier"> <ds:Transforms></font></div><div><font class="Apple-style-span" face="Courier"> <ds:Transform Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#enveloped-signature">http://www.w3.org/2000/09/xmldsig#enveloped-signature</a>"/></font></div><div><font class="Apple-style-span" face="Courier"> <ds:Transform Algorithm="<a href="http://www.w3.org/2001/10/xml-exc-c14n#">http://www.w3.org/2001/10/xml-exc-c14n#</a>"></font></div><div><font class="Apple-style-span" face="Courier"> <ec:InclusiveNamespaces xmlns:ec="<a href="http://www.w3.org/2001/10/xml-exc-c14n#">http://www.w3.org/2001/10/xml-exc-c14n#</a>" PrefixList="xs"/></font></div><div><font class="Apple-style-span" face="Courier"> </ds:Transform></font></div><div><font class="Apple-style-span" face="Courier"> </ds:Transforms></font></div><div><font class="Apple-style-span" face="Courier"> <ds:DigestMethod Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#sha1">http://www.w3.org/2000/09/xmldsig#sha1</a>"/></font></div><div><font class="Apple-style-span" face="Courier"> <ds:DigestValue>pHH...qqao=</ds:DigestValue></font></div><div><font class="Apple-style-span" face="Courier"> </ds:Reference></font></div></div><div><div><font class="Apple-style-span" face="Courier"> </ds:SignedInfo></font></div><div><font class="Apple-style-span" face="Courier"><span class="Apple-tab-span" style="white-space:pre"> </span><ds:SignatureValue>Zwx1Qc...6B8yA==</ds:SignatureValue></font></div><div><font class="Apple-style-span" face="Courier"> <ds:KeyInfo></font></div><div><font class="Apple-style-span" face="Courier"> <ds:X509Data></font></div><div><font class="Apple-style-span" face="Courier"> <ds:X509Certificate>MIIDKD...</font><span class="Apple-style-span" style="font-family: Courier; ">H42qzeMe5</span></div><div><font class="Apple-style-span" face="Courier">78899UPKiiVsBYRQuA8=</ds:X509Certificate></font></div><div><font class="Apple-style-span" face="Courier"> </ds:X509Data></font></div><div><font class="Apple-style-span" face="Courier"> </ds:KeyInfo></font></div><div><font class="Apple-style-span" face="Courier"> </ds:Signature></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:Subject></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" NameQualifier="<a href="https://idp.your.edu.ie/idp/shibboleth">https://idp.your.edu.ie/idp/shibboleth</a>" <b>SPNameQualifier="urn:federation:MicrosoftOnline</b>">g+WdVgjft0eVkOFHXhG+kQ==</saml2:NameID></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:SubjectConfirmationData Address="193.1.228.190" InResponseTo="_f00d78f6-f6dd-4d5f-89f4-4939234ff219" NotOnOrAfter="2013-04-18T15:21:02.061Z" Recipient="<a href="https://login.microsoftonline.com/login.srf">https://login.microsoftonline.com/login.srf</a>"/></font></div><div><font class="Apple-style-span" face="Courier"> </saml2:SubjectConfirmation></font></div><div><font class="Apple-style-span" face="Courier"> </saml2:Subject></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:Conditions NotBefore="2013-04-18T15:16:02.061Z" NotOnOrAfter="2013-04-18T15:21:02.061Z"></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:AudienceRestriction></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:Audience>urn:federation:MicrosoftOnline</saml2:Audience></font></div><div><font class="Apple-style-span" face="Courier"> </saml2:AudienceRestriction></font></div><div><font class="Apple-style-span" face="Courier"> </saml2:Conditions></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:AuthnStatement AuthnInstant="2013-04-18T15:16:01.919Z" SessionIndex="18c9e893a4dbddd671782dc926ead4fcb3fb50111cf1b0cdb3464ae83d6d58ee"></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:SubjectLocality Address="193.1.228.190"/></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:AuthnContext></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></font></div><div><font class="Apple-style-span" face="Courier"> </saml2:AuthnContext></font></div><div><font class="Apple-style-span" face="Courier"> </saml2:AuthnStatement></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:AttributeStatement></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:Attribute FriendlyName="UserId" Name="IDPEmail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></font></div><div><font class="Apple-style-span" face="Courier"> <saml2:AttributeValue xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>" xsi:type="xs:string"><a href="mailto:gwearen@your.edu.ie">gwearen@your.edu.ie</a></saml2:AttributeValue></font></div><div><font class="Apple-style-span" face="Courier"> </saml2:Attribute></font></div><div><font class="Apple-style-span" face="Courier"> </saml2:AttributeStatement></font></div><div><font class="Apple-style-span" face="Courier"> </saml2:Assertion></font></div><div><font class="Apple-style-span" face="Courier"></saml2p:Response></font></div></div></div></body></html>