<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-CA" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Greetings….<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am embarking on something that might be a crazy idea for a number of reasons, but thought I would share with you all anyways….<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">An organization I am working with is very small, and has no on-premise Active Directory domain-controller, or an enterprise LDAP directory. They have an Office 365 tenant that authenticates users against the Azure AD identity store.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am planning to deploy the Shibboleth IDP v3 server on a local CentOS virtual-server (in Canada), and point the LDAP backend at Azure AD to authenticate the users. Azure AD offers an LDAPS endpoint in their “Domain Services” package,
that Microsoft offers as an extra bundle of goodies that they license.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The LDAPS endpoint on Azure AD Domain Services offers simple-bind, and returns ldapsearch results. I can see all Azure AD entry attributes that I should be able to see.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’m just wondering whether any other Shibboleth deployers are confronting this situation, as I see a few more threads now dealing with Azure integration questions.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks for any waves from the field….<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Corey S.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-CA">Corey Scholefield |
<a href="mailto:coreys@uvic.ca"><span style="color:#0563C1">coreys@uvic.ca</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-CA">Sr. Identity Systems Analyst<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-CA">University of Victoria | Victoria, B.C. Canada<o:p></o:p></span></p>
<p class="MsoNormal"><b><i><span style="font-size:12.0pt;color:#1F497D;mso-fareast-language:EN-CA"><o:p> </o:p></span></i></b></p>
<p class="MsoNormal"><span style="color:#1F497D;mso-fareast-language:EN-CA">University Systems<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D;mso-fareast-language:EN-CA"><img border="0" width="436" height="54" style="width:4.5416in;height:.5625in" id="Picture_x0020_1" src="cid:image001.jpg@01D2D57B.A33AD040" alt="Description: cid:503A0399-005C-4190-8638-3C32C44A5C8B"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-CA"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>