Educational ICT Virtualisation Specialist

Twitter LinkedIn E-mail
Precedence Technologies Ltd
Technology House, 36a Union Lane
Cambridge, CB4 1QB, United Kingdom
T: +44 (0)8456 446 800 / +44 (0)1223 359900
F: +44 (0)8456 446 899 / +44 (0)1223 359459
E: enquiries@precedence.co.uk
Identities

Jump To: Support > KB > Office365? > Identities

Identities

Cloud Identity

  • Separate credential from on-premises credential
  • Authorisation occurs via cloud directory service
  • Password policy is stored in Office 365
  • Does not require on-premises server deployment

Federated Identity

  • Same credential as on-premises credential
  • Authentication occurs via on-premises directory service
  • Password policy is stored on-premises
  • Allows use of Access Control Policies
  • Requires on-premises DirSync server
  • Requires on-premises ADFS server

Sign-On experience

From: https://technet.microsoft.com/en-GB/library/office-365-user-account-management.aspx

 Cloud IdentityFederated Identity
Microsoft Outlook 2007/2010/2013Sign in each sessionSign in each session
Outlook for MacSign in each sessionSign in each session
Exchange ActiveSyncSign in each sessionSign in each session
POP,IMAP,Microsoft Outlook for Mac 2011Sign in each sessionSign in each session
Office 2010 using SharePoint OnlineSign in each sessionSign in each session
Office 365 Portal / Outlook Web App / SharePoint Online / Office Web AppsSign in each sessionSign in each session (username only)
Skype for Business OnlineSign in each sessionNo prompt

Some users wish to get Outlook 2013 to automatically single sign onto Office365 using Federated Identify. Unfortunately, this is not possible, by design:

https://support.microsoft.com/en-gb/kb/2535227 states “The experience for logging on to Microsoft Outlook connections is also not expected to be a single sign-on experience.”

Even so, it is generally worth avoiding SSO. James Marshall, an Office365 specialist at Microsoft UK, says “Deploying Office 365 Education? You don’t need single sign-on, and here’s why!”: http://www.jamesbmarshall.com/2013/10/you-dont-need-sso/

© Copyright Precedence Technologies 1999-2018
Page last modified on July 08, 2016, at 01:44 PM by sborrill