<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" id="owaParaStyle">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body fpstyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">
<p class="MsoNormal"><span style="" lang="EN-US">Hi,<br>
<br>
I already managed to setup an environment with Sharepoint -> ADFS -> Shibboleth and Authentication against AD with Kerberos and PasswordAuth. Works well so far.<br>
Now we have some issues with mobile apps. Access to Sharepoint with a mobile browser like safari, chrome or firefox isn't a problem. Access with some mobile apps is problematic. The biggest issue that I am facing now are the Microsoft Office apps like Word
for iOS. If I try to connect with those apps to Sharepoint, the redirect to ADFS a Sharepoint works, but after that, I get the following error in the log files:</span></p>
<p class="MsoNormal"><span style="" lang="EN-US"><br>
</span></p>
<p class="MsoNormal" style="margin-bottom:0cm; margin-bottom:.0001pt"><span style="" lang="EN-US">2017-10-28 12:50:10,396 - WARN [org.opensaml.saml.common.binding.security.impl.MessageReplaySecurityHandler:156] - IP:[…] - Message Handler:<span style="">
</span>Replay detected of message 'id-1bd8c0d8-2fd1-48d6-a263-3c3f9bc22eb9' from issuer 'http://url/adfs/services/trust'</span></p>
<p class="MsoNormal" style="margin-bottom:0cm; margin-bottom:.0001pt"><span style="" lang="EN-US">2017-10-28 12:50:10,401 - WARN [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:202] - IP: […] - Profile Action WebFlowMessageHandlerAdaptor: Exception
handling message</span></p>
<p class="MsoNormal" style="margin-bottom:0cm; margin-bottom:.0001pt"><span style="" lang="EN-US">org.opensaml.messaging.handler.MessageHandlerException: Rejecting replayed message ID 'id-1bd8c0d8-2fd1-48d6-a263-3c3f9bc22eb9' from issuer http://url/adfs/services/trust</span></p>
<p class="MsoNormal" style="margin-bottom:0cm; margin-bottom:.0001pt"><span style="" lang="EN-US"><span style="">
</span>at org.opensaml.saml.common.binding.security.impl.MessageReplaySecurityHandler.doInvoke(MessageReplaySecurityHandler.java:157)</span></p>
<p class="MsoNormal" style="margin-bottom:0cm; margin-bottom:.0001pt"><span style="" lang="EN-US">2017-10-28 12:50:10,418 - WARN [org.opensaml.profile.action.impl.LogEvent:105] - IP: […] - A non-proceed event occurred while processing the request: MessageReplay</span></p>
<p class="MsoNormal"><span style="" lang="EN-US"> </span></p>
<p class="MsoNormal"><span style="" lang="EN-US">Is it possible to disable the MessageReplay check for testing purpose? Didn’t find a solution for that in the documentation.</span></p>
<p class="MsoNormal"><span style="" lang="EN-US">Thanks,</span></p>
<p class="MsoNormal"><span style="" lang="EN-US">Waldemar</span></p>
</div>
</body>
</html>