<div dir="ltr">Hi Dennis<div><br></div><div>Please refer to the whitepaper at <a href="http://www.microsoft.com/en-gb/download/details.aspx?id=35464">http://www.microsoft.com/en-gb/download/details.aspx?id=35464</a> . This document is the complete in its instructions for configuring Shibboleth for Office 365. It was valid at the time of publishing. </div>
<div><br></div><div>The instructions at <a href="http://technet.microsoft.com/en-us/library/jj205456.aspx">http://technet.microsoft.com/en-us/library/jj205456.aspx</a> currently don't include ECP specific configuration details required for Outlook. They include bare minimum details required to get OWA working.</div>
<div><br></div><div>Please review the documentation carefully and do not blindly follow. The documentation is provided to help configure a test environment for testing O365 SSO using Shibboleth. Some of the guidance in the article may not be the best guidance for use in production environments. Others with expertise in these non-Microsoft products may have guidance on doing things the optimal and secure way.</div>
<div><br></div><div>I hope the whitepaper helps.</div><div><br></div><div>Cheers</div><div><br></div><div>Mat</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On 11 September 2013 15:34, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On 9/11/13 10:11 AM, "Dennis Casimiro" <dcasimiro@BORNQUIST.com> wrote:<br>
<br>
>I am wondering if this is because the ECP is not entirely enabled.<br>
<br>
</div>Well, you can look at the Shibboleth documentation for help on how to do<br>
that. There's an IdPEnableECP topic.<br>
<div class="im"><br>
><br>
>I found this as a possible additional configuration (to be added to the<br>
>web.xml file) that isn¹t published with the ³Configuring Shibboleth for<br>
>SSO with Office365² documentation:<br>
<br>
</div>That's not our documentation, so it's unsurprising to me that it's<br>
incomplete.<br>
<br>
But as you will find in ours, we can't document how *you* need to enable<br>
ECP. That depends on your local choices for configuring authentication<br>
outside the IdP, which is a requirement in V2. Your web server choices<br>
dictate the options for how to configure basic-auth on that endpoint.<br>
<br>
Using web.xml is one way to do it, if your web server is a Java one.<br>
<div class="im"><br>
><br>
>Does anyone think this may be my problem? Looking at the web.xml file I<br>
>am not entirely sure where this belongs.<br>
<br>
</div>Refer to your container's documentation. That fragment not be sufficient<br>
to solve your problem, the container will require additional configuration.<br>
<br>
-- Scott<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div><br></div>