Forum Discussion

Copper Contributor

Jul 07, 2017

Issues with WS-FED Sign In

Hello, I am having issues getting WS-FED SSO working between our ID provider solution (ForgeRock Identity) and the O365 platform. I have succesfully configured O365 with our ForgeRock domain ...

Access Management

Azure Active Directory (AAD)

Identity Management

microsoft 365

EXPTA

MVP

Jul 07, 2017

ForgeRock Identity is not on the Azure AD federation compatibility list, so it has not been validated to work with Office 365.

That said, you can try following this ForgeRock OpenIDM and Office 365 post, which links to scripts they are developing for integration. Keep in mind, it's a work in progress and is only supported by ForgeRock.

Andrew Firth
Copper Contributor
Jul 10, 2017
Hi Jeff. Thanks for the reply.

I am aware ForgeRock is not 'officially' supported, but given that WS-Fed is a standard that our FR platform can use, I am hoping we can get it working anyway!

Unfortunately I don't have access to stash.forgerock.org so I cannot see the details, however would I be correct in assuming that the IDM > AzureAD connector mentioned in that thread would be required to allow user provisioning?

We do not want to enable provisioning. We simply want to do SSO authentication. Do you know if this connector is still required for this use case?
- EXPTA
  MVP
  Jul 10, 2017
  Hi Andrew,
  
  I have no personal experience with ForgeRock, but it would be up to the IDM to provide support for Azure/O365 connectivity. So basically, if ForgeRock says it needs the connector, then it does.