<div dir="ltr">Thanks a bunch, Mauro! Really helpful and sorted videos. I am really interested to test these all in my blackbox. <br>Appreciated! :) </div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, May 7, 2013 at 4:37 PM, Mauro Minella <span dir="ltr"><<a href="mailto:Mauro.Minella@microsoft.com" target="_blank">Mauro.Minella@microsoft.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="IT" link="blue" vlink="purple">
<div>
<p>Hi,<u></u><u></u></p>
<p>I finally made it work. The last trick before compiling is to prevent Shibboleth from sending the Transient NameID by removing or commenting the following lines out in attribute-filter.xml:<u></u><u></u></p>
<p><u></u> <u></u></p>
<p> <afp:AttributeRule attributeID="transientId"><u></u><u></u></p>
<p> <afp:PermitValueRule xsi:type="basic:ANY"/><u></u><u></u></p>
<p> </afp:AttributeRule><u></u><u></u></p>
<p><u></u> <u></u></p>
<p>To recap, in order to implement ACTIVE authentication, you should:<u></u><u></u></p>
<p>- Install the Shibboleth ECP Extension (already included in Shibboelth 2.3.3 or later)<u></u><u></u></p>
<p>- Enable HTTP Basic authentication in Tomcat<u></u><u></u></p>
<p>- Provide the ECP entry point on the SP side<u></u><u></u></p>
<p>- Add SAML2 ECP Profile entry to the Windows Azure AD Relying Party<u></u><u></u></p>
<p>- Enable ECP extension in WEB.XML<u></u><u></u></p>
<p>- Update certificate name in BUILD.XML<u></u><u></u></p>
<p>- Block Shibboleth from sending the Transient NameID<u></u><u></u></p>
<p>- Restart Apache Tomcat service<u></u><u></u></p>
<p><u></u> <u></u></p>
<p>To whom it may concern, I collected the results in this playlist
<a href="http://www.youtube.com/playlist?list=PLzp167WWyvMLpvQeNeurJzbF6yPOeadOS&feature=em-share_playlist_user" target="_blank">
http://www.youtube.com/playlist?list=PLzp167WWyvMLpvQeNeurJzbF6yPOeadOS&feature=em-share_playlist_user</a> which includes 6 videos showing how to implement Office 365 federation with Shibboleth, end-to-end.<span class="HOEnZb"><font color="#888888"><u></u><u></u></font></span></p>
<span class="HOEnZb"><font color="#888888">
<p><u></u> <u></u></p>
<p>Mauro <u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
</font></span></div>
</div>
<br>--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br>Best,<br>Zico
</div>