<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#0070C0;
font-weight:normal;
font-style:normal;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle22
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#0070C0;
font-weight:normal;
font-style:normal;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#0070C0;
font-weight:normal;
font-style:normal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:70.85pt 56.7pt 56.7pt 56.7pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:526990504;
mso-list-type:hybrid;
mso-list-template-ids:656972570 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.5in;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.0in;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.5in;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.0in;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.5in;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:4.0in;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:4.5in;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:5.0in;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:5.5in;
text-indent:-.25in;
font-family:Wingdings;}
@list l1
{mso-list-id:1762752803;
mso-list-type:hybrid;
mso-list-template-ids:812001050 67698711 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l1:level1
{mso-level-number-format:alpha-lower;
mso-level-text:"%1\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l1:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l1:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#0070C0'>Team,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#0070C0'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#0070C0'>Posting again as no response or pointer to move forward.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#0070C0'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#0070C0'>Dematri<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#0070C0'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>From:</span></b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> users-bounces@shibboleth.net [mailto:users-bounces@shibboleth.net] <b>On Behalf Of </b>solution79<br><b>Sent:</b> Tuesday, June 4, 2013 11:58 AM<br><b>To:</b> 'Shib Users'<br><b>Subject:</b> Shibboleth for Office 365 (Authentication decision) - Pls read<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'>Hello All,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'>Looking for valuable advice for the below scenario in order to implement Shibboleth for Office 365.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'>It’s important to understand our current architecture as we already have Shibboleth placed for other applications to authenticate.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'><br>Our current User login procedure – <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:1.5in;text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-size:11.0pt;font-family:Symbol;color:#002060'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'>Students provides the credentials at Student Portal, which is authenticated by </span><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'>IIdS (Inhouse Identity System) </span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:1.0in'><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:1.5in;text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span lang=EN-AU style='font-size:11.0pt;font-family:Symbol;color:#002060'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'>Student portal >>(redirect using http:302) >> CAS (Central Authentication System) >> (redirect using http:302) >> Shibboleth >>(redirect using http:302) >> IIdS (Inhouse Identity System).<o:p></o:p></span></p><p class=MsoNormal style='margin-left:1.0in'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:1.5in;text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span lang=EN-AU style='font-size:11.0pt;font-family:Symbol;color:#002060'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'>IIdS (Inhouse Identity System) talks to the LDAP running Sun Enterprise Directory 5.2<o:p></o:p></span></p><p class=MsoNormal style='margin-left:1.0in'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:1.5in;text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span lang=EN-AU style='font-size:11.0pt;font-family:Symbol;color:#002060'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'>Once user is authenticated, Cookie session is created and passed in reverse order:<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:1.5in'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'>IIdS (Inhouse Identity System) >> Shibboleth >> CAS >> Student portal<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:1.5in;text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span lang=EN-AU style='font-size:11.0pt;font-family:Symbol;color:#002060'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'>Post successful login, user clicks on “My Email” which in turn uses SSO toolkit (Version: 4.5) to contact MS Live@Edu<o:p></o:p></span></p><p class=MsoNormal style='margin-left:1.0in;text-indent:2.25pt'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:1.5in;text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span lang=EN-AU style='font-size:11.0pt;font-family:Symbol;color:#002060'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'>Cookie session contains the Email address.<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:1.5in'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'><o:p> </o:p></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><b><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'>My reason to bring the current authentication mechanism on surface:<o:p></o:p></span></b></p><p class=MsoListParagraph style='margin-bottom:12.0pt;text-indent:-.25in;mso-list:l1 level1 lfo4'><![if !supportLists]><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'><span style='mso-list:Ignore'>a)<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'>Our Shibboleth is getting authenticated by LDAP – SUN Enterprise Directory 5.2. Therefore from Shibboleth Federation with Office 365 perspective, can it use the same LDAP to authenticate users rather than AD?<o:p></o:p></span></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l1 level1 lfo4'><![if !supportLists]><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'><span style='mso-list:Ignore'>b)<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'>If yes, then the attribute for authentication can be the user login id rather email address, as we are using it currently. <br>However I understand for SSO to Office 365 you need to provide email address. Is it possible to have the email address in the background provided by Shibboleth to Office 365?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'><o:p> </o:p></span></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l1 level1 lfo4'><![if !supportLists]><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'><span style='mso-list:Ignore'>c)<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'>Once replaced with Shibboleth for Email access. Now user logs to Student portal using their Student Login id, post authentication while clicking on “My Email” will Shibboleth pick the email address from the cookie session and provide the same to Office 365 thus allowing user a SSO experience to access emails?<o:p></o:p></span></p><p class=MsoListParagraph><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'>Team, any pointer will be of great help!<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'>Regards,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#002060'>Dematri<o:p></o:p></span></p></div></body></html>