<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div style="font-size: 14px; font-family: Calibri, sans-serif; color: rgb(0, 0, 0);">
<div>
<div><br>
</div>
</div>
</div>
<span id="OLK_SRC_BODY_SECTION" style="font-size: 14px; font-family: Calibri, sans-serif; color: rgb(0, 0, 0);">
<blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;">
<div>Two signatures in 3, one signature in 2.</div>
</blockquote>
</span>
<div><br>
</div>
<div>
<div><font face="Calibri,sans-serif">Ah, looks like I was missing the </font><font face="Calibri">signResponses=never bit:</font></div>
<div><font face="Calibri"><br>
</font></div>
<div>
<p style="margin: 0px; line-height: normal;"><font face="Calibri"> <rp:RelyingParty id="urn:federation:MicrosoftOnline" </font></p>
<p style="margin: 0px; line-height: normal;"><font face="Calibri"> provider="http://myidp.mydomain.ca"</font></p>
<p style="margin: 0px; line-height: normal;"><font face="Calibri"> defaultSigningCredentialRef="IdPCredential"</font></p>
<p style="margin: 0px; line-height: normal;"><font face="Calibri"> defaultAuthenticationMethod="urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport"></font></p>
<p style="margin: 0px; line-height: normal;"><font face="Calibri"> <rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile"</font></p>
<p style="margin: 0px; line-height: normal;"><font face="Calibri"> signAssertions="conditional"</font></p>
<p style="margin: 0px; line-height: normal;"><font face="Calibri"> encryptAssertions="never"</font></p>
<p style="margin: 0px; line-height: normal;"><font face="Calibri"> encryptNameIds="never" /></font></p>
<p style="margin: 0px; line-height: normal;"><font face="Calibri"> <rp:ProfileConfiguration xsi:type="saml:SAML2ECPProfile" </font></p>
<p style="margin: 0px; line-height: normal;"><font face="Calibri"> signAssertions="conditional" </font></p>
<p style="margin: 0px; line-height: normal;"><font face="Calibri"> encryptAssertions="never"</font></p>
<p style="margin: 0px; line-height: normal;"><font face="Calibri"> <b>signResponses="never" </b></font></p>
<p style="margin: 0px; line-height: normal;"><font face="Calibri"> encryptNameIds="never" /></font></p>
<p style="margin: 0px; line-height: normal;"><font face="Calibri"> </rp:RelyingParty> </font></p>
</div>
</div>
<div><br>
</div>
<div>I’ll need to do more testing but it seems to work now, thanks!</div>
<div><br>
</div>
<div>
<blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="border-left-color: rgb(181, 196, 223); border-left-width: 5px; border-left-style: solid; padding: 0px 0px 0px 5px; margin: 0px 0px 0px 5px;">
Sorry for just dispatching the quick'n'ugly. It looked like a production switchover issue to me, so I wanted to get you a quick response.</blockquote>
</div>
<span id="OLK_SRC_BODY_SECTION" style="font-size: 14px; font-family: Calibri, sans-serif; color: rgb(0, 0, 0);">
<blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;">
<div>For what it's worth, I haven't encountered that specific message nor that behavior. A random site of which I know once had the ECP endpoint out entirely and Microsoft Exchange apparently worked fine on most or all devices, ironically. Apple Mail bricked. The
experiment was not repeated.</div>
</blockquote>
</span>
<div><br>
</div>
<div>I appreciate the quick response. It was a production change and I had to roll back to shib2. The problem was that it worked during my dev/qa testing. I’d confirm the client works in shib2 and switch to shib3 and see that it still worked. Is the Microsoft
proxy caching credentials?</div>
<span id="OLK_SRC_BODY_SECTION" style="font-size: 14px; font-family: Calibri, sans-serif; color: rgb(0, 0, 0);">
<blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;">
<div></div>
</blockquote>
</span>
</body>
</html>