使用用于Office365 SSO的第三方IdP配置Azure AD联合身份验证 [英] Configuring Azure AD federation with a third party IdP for Office365 SSO

问题描述

 

我正在为使用WS *协议的Office 365登录使用第三方STS解决方案配置Asure AD身份联盟.我尝试通过使用联合身份的用户名和密码登录Office 365门户来测试配置. 一切正常.但是，当我使用 Microsoft Connectivity Analyzer (这是我的强制性要求)，我被重定向到IdP登录页面，并且当我登录时，还会显示Office 365帐户的主页.但是测试将继续运行10分钟，然后执行以下操作 测试用例失败.

I am working on configuring Asure AD identity federation with a third party STS solution for Office 365 sign-in using WS* protocols. I tested the configuration by trying to sign in to Office 365 portal using a federated identity's username and password. It works all fine. But I when I test the federation connectivity using Microsoft Connectivity Analyzer, (which is a compulsory requirement in my case), I am redirected to my IdP login page and when I log in, the home page of the Office 365 account is also displayed. But the test continues to run for 10 minutes and the following test case fails.

测试 案例:

从身份提供商的被动身份验证联盟端点中获取身份令牌

Retrieving an identity token from the Passive authentication federation endpoint of your identity provider

结果::从您的身份提供商获取令牌时出错.

Result: There was an error retrieving a token from your identity provider.

其他详细信息:在响应正文中找不到该令牌:(此处显示了Office 365主页的整个HTML正文)

Additional Details: The token could not be found in the response body : (here the entire HTML body of the office 365 home page is displayed)

通过了所有其他测试.

如果有人可以提出问题，我将非常感谢.

谢谢.

Dinix195

推荐答案

在远程连接分析器树中查看测试结果，并按照说明检查故障排除步骤.

Review the test results in the remote connectivity analyzer tree and check the troubleshooting steps as described.

https://support.microsoft.com/en-gb/help/2650717/how-to-use-remote-connectivity-analyzer-to-troubleshoot-single-sign-on

https://support.microsoft.com/en-gb/help/2650717/how-to-use-remote-connectivity-analyzer-to-troubleshoot-single-sign-on

这篇关于使用用于Office365 SSO的第三方IdP配置Azure AD联合身份验证的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！