Forum Discussion
scl-family_1
Nov 27, 2018Copper Contributor
Office 365 Single sign On
I want to integrate single sign on(SSO) with Office 365.I am using third party IDP GLUU. and Sync Adfs with with office365 admin pannel. When i entered email in office365 login then it is correctly r...
Adam Ochs
Nov 27, 2018Steel Contributor
Hey scl-family_1,
It looks to me like the email address is not getting mapped properly to the username or "nameID" inside of your SAML application. Essentially something else is being tested against Office 365 from the IDP.
To fix this, I would look at creating a claims rule inside of ADFS to change the nameID to the email address for your users.
This article walks through the process of creating that claim.
https://help.screensteps.com/m/remote_authentication/l/841006-troubleshooting-saml-for-adfs
Once that is in place, I would expect you to resolve the error you are seeing.
Adam
- scl-family_1Nov 27, 2018Copper ContributorDear Adam,
I have tried your suggestion but same result and error.
I am using Gluu Idp.Please find doc for Integration Office365 in Gluu.
https://gluu.org/docs/ce/3.1.3/integration/saas/office/
IDP requires three attributes IDPEmail, ImmutableID and objectguid
you can find in doc that IDP requires nameID 'ImmutableID' .This is a 'persistent' type nameID; base attribute 'objectguid'