Sign in
 
Home
Microsoft Online Services TechCenter >
> 
> 
Office 365 for SSO with AD FS 2.0

Proposed Answer Office 365 for SSO with AD FS 2.0

  • Tuesday, July 03, 2012 5:14 AM
     
     
    Sign In to Vote
    0

    Hi,

     

    Our company is currently subscribed to Office 365 - Exchange Online and we would like to implement Office 365 SSO with AD FS 2.0. I'm getting a little confuse when reading http://www.microsoft.com/en-au/download/details.aspx?id=28971, hope someone can shed some lights.

    Refer article http://www.microsoft.com/en-au/download/details.aspx?id=28971

    Page 2 - Section 1.1 Objectives of this paper, it stated:

    Roaming with a work computer: For user who are logged on to domain-joined computers with their corporate credentials but who are NOT connected to the corporate network (i.e. work computer at home), SSO enables them to access the services in Office 365 without signing in again as well;

     

    However, on Page19, -Section 3.2 Sign-in Experience for Federated Identities, Table 2 stated:

    -

    SSO experience with Office 365 with domain-joined machine for OWA: Seamless sign on with no prompts from Inside the corporate network; but user will be Prompted for credentials when access from Outside the company network.

     

    Please kindly clarify / confirm the below end-user experiences when Office 365 SSO with AD FS 2.0 is implemented:

    1. Will OWA user be prompted for credentials again when they access Office 365 using a domain-joined computer from OUTSIDE the corporate network?

    2. From reading the article, my understanding is that Outlook Client (no matter they access it via domain-joined or non domain-joined computer (inside and outside corporate network), they will always be prompted for credentials (with checkbox to remember credentials), is this correct?

     

    Regards,

    Best Regards,

     

All Replies

  • Tuesday, July 03, 2012 10:25 PM
     
     Proposed Answer
    Sign In to Vote
    1

    1. When using ADFS outside the corporate network (domain-joined machine or not - the differentiator is whether or not the machine can contact the internal AD and, therefore, the internal ADFS server), the user will enter in their O365 username (ONLY username) to OWA, be directed to the ADFS proxy, enter in their on-premises username/password, then be logged into OWA.

    2.  This is my experience, currently.  I get prompted for credentials for Outlook unless I select to remember credentials even when I'm on the corporate network.

    Have a great day,

    Dan

    www.insecurityinc.info