MicrosoftCorporation.docxVIP

STS Integration Paper using WS-* Protocols For Azure AD and Office 365 PAGE \* MERGEFORMAT 19 This document is provided “as-is”. Information and views expressed in this document, including URL and other Internet Web site references, may change without notice. Some examples depicted herein are provided for illustration only and are fictitious.? No real association or connection is intended or should be inferred. This document does not provide you with any legal rights to any intellectual property in any Microsoft product. You may copy and use this document for your internal, reference purposes. ? 2014 Microsoft.? All rights reserved. Microsoft Corporation STS Integration Paper using WS-* Protocols Federation with Azure Active Directory This paper details the agreement for STSs to Interop with Azure Active Directory using the WS-Federation and WS-Trust protocols Contents TOC \o 1-3 \h \z \u HYPERLINK \l _Toc376938434 1 Introduction PAGEREF _Toc376938434 \h 1 HYPERLINK \l _Toc376938435 1.1 Required Qualification of the Security Token Service PAGEREF _Toc376938435 \h 2 HYPERLINK \l _Toc376938436 2 Token Claim Requirements PAGEREF _Toc376938436 \h 2 HYPERLINK \l _Toc376938437 2.1 Issuer URI PAGEREF _Toc376938437 \h 2 HYPERLINK \l _Toc376938438 2.2 Token Contents PAGEREF _Toc376938438 \h 3 HYPERLINK \l _Toc376938439 2.3 Client Access Policies for Location Isolation PAGEREF _Toc376938439 \h 4 HYPERLINK \l _Toc376938440 2.4 Client End-Point Matrix PAGEREF _Toc376938440 \h 4 HYPERLINK \l _Toc376938441 3 Customer Federation Setup PAGEREF _Toc376938441 \h 5 HYPERLINK \l _Toc376938442 4 Establishing/Managing a Trust PAGEREF _Toc376938442 \h 5 HYPERLINK \l _Toc376938443 4.1 Cmdlet Ordering PAGEREF _Toc376938443 \h 6 HYPERLINK \l _Toc376938444 4.1.1 New Federated Domain PAGEREF _Toc376938444 \h 6 HYPERLINK \l _Toc376938445 4.1.2 Converting a Domain to Federation or Standard PAGEREF _Toc376938445 \h 7 HYPERLINK \l _Toc376938446 4.1.3 Management