topic Re: Office 365 and Duo SSO? Current State in Managing Users

Office 365 and Duo SSO? Current State

lkeyes1 — Wed, 25 Nov 2020 14:35:49 GMT

Hi…wondering about what’s necessary to integrate Office 365 web access with SSO. I saw another message suggesting that DUO is working on a “named application” for o365 and that there may be documentation available for setting up a generic SAML application in the interim. I’d like to avoid setting up a DAG if possible…we think we can do CA if necessary, but I convinced my manager to have us set up SSO since we expect to use it with other applications (Salesforce, etc).
We’re in the process of setting that up…would like to get the o365 on it.

Re: Office 365 and Duo SSO? Current State

michaellperrin — Thu, 24 Dec 2020 02:50:18 GMT

I am trying to do the same thing right now.

I am able to get Office365 to federate to Duo SSO but then I get an error on MS

AADSTS51004: The user account removeduser@test.com does not exist in the XXXX directory. To sign into this application, the account must be added to the directory.

My guess is Duo is not sending the correct ImmutableID.

If this is working in DAG why can’t this be configured with Duo SSO?

Re: Office 365 and Duo SSO? Current State

jamieis — Thu, 07 Jan 2021 21:36:01 GMT

Hi @lkeyes and @mikeperrin attached is a KB article about how to configure a generic SAML application to be used for Office 365: Guide to Configuring Office 365 with Duo Single Sign-On

Re: Office 365 and Duo SSO? Current State

jamieis — Fri, 09 Jul 2021 13:50:11 GMT

Just wanted to pop back in to say that we recently released our named integration for Microsoft 365 for Duo SSO: D219: Duo Release Notes for July 9, 2021

Re: Office 365 and Duo SSO? Current State

lkeyes1 — Thu, 15 Jul 2021 01:16:09 GMT

Jamie…many thanks… We ultimately have set up o365 using Active Directory Conditional Access, and it appears to be working fine.