<div><div dir="auto">The prod o365 may need an sha128 cert if I remember correct as it was running on a separate path. /o365idp orsomething or another.. fwiw I don’t think outlook etc are using ECP.. rather “modern auth”.. I believe the encryption/signing very can be set in the relying party config.. for the ECP protocol </div><div dir="auto"><br></div><div dir="auto">-John</div><div dir="auto"><br></div><div dir="auto"><br></div><br><div class="gmail_quote"><div>On Thu, Dec 28, 2017 at 5:10 PM Martel, Michael H. <<a href="mailto:michael.martel@vsc.edu">michael.martel@vsc.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Greetings!<br>
<br>
After searching through the list archives, it seems like setting up ECP for Office 365 can sometimes be problematic. We just migrated to a new hosted IDP running Shibboleth v3.x . ECP is up an working with Apache. However, SOME parts of Office 365 do not like it.<br>
<br>
Outlook, Skype, Teams, Word, Outlook on Mobile are all fine and happy with the ECP. IMAP, Exchange Web Services, and mobile email (iOS/Android native apps) don’t' work.<br>
<br>
They DO work in our Test O365 Tennant. Neither we nor the vendor can see anything wrong in the Shib configs between the Tennants. Microsoft has been less than helpful, placing all of the blame on Shibboleth and refusing to provide any guidance.<br>
<br>
Any thoughts as to what we might have missed in our setup ?<br>
<br>
Thanks in advance!<br>
<br>
Michael<br>
<br>
--<br>
<br>
--------------------------------o---------------------------------<br>
Michael H. Martel | Director of Data Center Administration<br>
<a href="mailto:michael.martel@vsc.edu" target="_blank">michael.martel@vsc.edu</a> | Systems and Security Administrator<br>
Vermont State Colleges | PH:802-224-3010 FX:802-224-3035<br>
<br>
<br>
<br>
--<br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a></blockquote></div></div><div dir="ltr">-- <br></div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><span style="font-size:14px;line-height:24px;color:rgb(68,68,68);font-family:'Open Sans',Helvetica,Arial,sans-serif">John Schrader</span><br></div><div><font color="#444444" face="Open Sans, Helvetica, Arial, sans-serif"><span style="font-size:14px;line-height:24px">Identity and Access Management</span></font></div><div><font color="#444444" face="Open Sans, Helvetica, Arial, sans-serif"><span style="font-size:14px;line-height:24px">Office of Information Technologies</span></font></div><div><font color="#444444" face="Open Sans, Helvetica, Arial, sans-serif"><span style="font-size:14px;line-height:24px">University of Notre Dame</span></font></div><div><br></div><div dir="ltr"><span style="color:rgb(68,68,68);font-family:'Open Sans',Helvetica,Arial,sans-serif;font-size:14px;font-style:italic;line-height:24px">EVERYTHING SHOULD BE MADE AS SIMPLE AS POSSIBLE, BUT NOT ANY SIMPLER</span><div><span style="color:rgb(68,68,68);font-family:'Open Sans',Helvetica,Arial,sans-serif;font-size:14px;font-style:italic;line-height:24px">—ALBERT EINSTEIN</span><br></div></div></div></div></div></div></div></div>