<html dir="ltr"><head></head><body style="text-align:left; direction:ltr;"><div>On Tue, 2022-07-05 at 16:05 +0000, Cantor, Scott via users wrote:</div><div><span><pre><br></pre></span></div><div><br></div><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><pre>On 7/5/22, 11:37 AM, "users on behalf of Dave Perry via users" <</pre><a href="mailto:users-bounces@shibboleth.net"><pre>users-bounces@shibboleth.net</pre></a><pre> on behalf of </pre><a href="mailto:users@shibboleth.net"><pre>users@shibboleth.net</pre></a><pre>> wrote:</pre><pre><br></pre><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><pre> Do these plugins form the way of making the IdP use Azure AD instead of on-prem AD, ergo will catch if a</pre><pre>user is signed in to Office 365 already they don't see a login screen to get a Shibboleth session? I have tried</pre><pre>looking at the guides, and what I found on google, but am a bit confused.</pre></blockquote><pre><br></pre><pre>No. The SAML proxying support in the IdP already does that. Using OIDC for proxying is work in progress.</pre><pre><br></pre><pre>-- Scott</pre><pre><br></pre></blockquote><pre><br></pre><pre>Hi Dave,</pre><pre><br></pre><pre>Echoing what Scott has said the SAML proxying support already does it... I'd add it's also tried and tested by many (our team at Jisc included)</pre><pre><br></pre><pre>Hope these links are useful.</pre><pre><br></pre><pre><a href="https://shibboleth.atlassian.net/wiki/spaces/KB/pages/1467056889/Using+SAML+Proxying+in+the+Shibboleth+IdP+to+connect+with+Azure+AD">https://shibboleth.atlassian.net/wiki/spaces/KB/pages/1467056889/Using+SAML+Proxying+in+the+Shibboleth+IdP+to+connect+with+Azure+AD</a></pre><pre><a href="https://wiki.shibboleth.net/confluence/display/KB/Using+SAML+Proxying+to+another+IdP">https://wiki.shibboleth.net/confluence/display/KB/Using+SAML+Proxying+to+another+IdP</a></pre><pre><a href="https://www.ukfederation.org.uk/content/Documents/ProxyingIdP">https://www.ukfederation.org.uk/content/Documents/ProxyingIdP</a></pre><pre><br></pre><pre>Also covered it (at a high level) in our Townhall Webinars for UK federation members... (my talk on Exploring IdPs in the federation)</pre><pre><br></pre><pre><a href="https://www.ukfederation.org.uk/content/News/2022-03-25-THWW">https://www.ukfederation.org.uk/content/News/2022-03-25-THWW</a></pre><pre><br></pre><pre><pre><span style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal;">Cheers,</span></pre><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;"><br></div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;">Jon</div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;"> </div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;"><br></div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;">Jon Agland</div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;">Technical Services Manager - Trust and Identity</div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;">T 02038198207</div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;">M 07443984222</div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;">Lumen House, Library Avenue, Harwell Oxford, Didcot, OX11 0SG</div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;"><br></div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;"><a href="https://www.jisc.ac.uk/trust-and-identity">https://www.jisc.ac.uk/trust-and-identity</a></div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;"><a href="https://www.ukfederation.org.uk">https://www.ukfederation.org.uk</a></div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;"> </div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;">Jisc is a registered charity (number 1149740) and a company limited by</div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;">guarantee which is registered in England under company number.</div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;">05747339, VAT number GB 197 0632 86. Jisc’s registered office is: 4</div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;">Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.</div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;"><br></div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;">Jisc Services Limited is a wholly owned Jisc subsidiary and a company</div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;">limited by guarantee which is registered in England under company</div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;">number 02881024, VAT number GB 197 0632 86. The registered office is: 4</div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;">Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.</div><div style="font-family: Ubuntu; font-size: 14.666667px; white-space: normal; width: 71ch;"> </div></pre></body></html>