<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
code
{mso-style-priority:99;
font-family:"Courier New";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="2050" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>I am using Shibboleth 2.4 as with Office365. While a user can login successfully to Office365, I cannot get Outlook or Activesync to work. Using the Remote Connectivity Analyzer, I get a “Metadata Exchange URL” error when testing SSO and a “http 401 Unauthorized response” error when testing Activesync.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I am wondering if this is because the ECP is not entirely enabled.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I found this as a possible additional configuration (to be added to the web.xml file) that isn’t published with the “Configuring Shibboleth for SSO with Office365” documentation:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'><security-constraint></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'> <display-name>Shibboleth IdP</display-name></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'> <web-resource-collection></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'> <web-resource-name>ECP</web-resource-name></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'> <url-pattern>/profile/SAML2/SOAP/ECP</url-pattern></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'> <http-method>GET</http-method></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'> <http-method>POST</http-method></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'> </web-resource-collection></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'> <auth-constraint></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'> <role-name>*</role-name></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'> </auth-constraint></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'> <user-data-constraint></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'> <transport-guarantee>CONFIDENTIAL</transport-guarantee></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'> </user-data-constraint></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'> </security-constraint></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:Consolas;color:#333333'> <o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'> <login-config></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'> <auth-method>BASIC</auth-method></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'> <realm-name>ShibUserPassAuth</realm-name></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'> </login-config></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:Consolas;color:#333333'> <o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'><!-- Depending on the version of tomcat in use, you may also need this - a list of security roles referenced by this web application --></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:Consolas;color:#333333'> <o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'><security-role></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'> <description>The role that is required to access the ECP area</description></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'> <role-name>*</role-name></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in;line-height:11.4pt'><span style='font-size:10.0pt;font-family:"Courier New";color:#333333'></security-role></span><span style='font-size:10.0pt;font-family:Consolas;color:#333333'><o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Does anyone think this may be my problem? Looking at the web.xml file I am not entirely sure where this belongs.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><b><span style='color:#17365D'>Dennis Casimiro, P.E., LEED GA</span></b><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt'>Vice President, IT Administrator</span><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal><b><span style='color:#17365D'>Bornquist, Inc.</span></b><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt'>7050 N. Lehigh Ave.</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt'>Chicago, IL 60646</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt'>T: 773.774.2800</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt'>F: 773.763.6534</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt'>E-mail: </span><a href="mailto:dcasimiro@bornquist.com"><span style='font-size:10.0pt;color:blue'>dcasimiro@bornquist.com</span></a><span style='font-size:10.0pt'> <o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><a href="http://www.bornquist.com/BQ_hvac.php"><span style='color:blue;text-decoration:none'><img border=0 width=564 height=103 id="Picture_x0020_1" src="cid:image001.jpg@01CEAECE.B295F0B0" alt=BI-Vendors></span></a><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>