doucao1066 2014-05-30 19:45
浏览 119

Office365 / Azure登录填充用户电子邮件

I am writing an app that connects to office 365 to pull the users newest X emails and show as a preview on their dashboard.

What I have is:

  • user loads the page.
  • logs them in via adfs sso
  • redirects back to the dashboard
  • redirects to office 365 login ( via my oAuth script - https://login.windows.net/common/oauth2/authorize, resource: https://outlook.office365.com/, state: MD5 ID, login_hint = urlencoded email, WHR = adfs.domain.com ( not right ).
  • the email address is pre-populated, they have to TAB out of the email field, and are redirected back to their adfs server before entering a password.
  • adfs confirms login and redirects to their dashboard - shows email.

What I understand from reading the below resources, I can pass the WHR param, that will bypass the azure login.

http://msdn.microsoft.com/en-us/library/gg185963.aspx

http://social.technet.microsoft.com/wiki/contents/articles/2424.windows-identity-foundation-wif-how-to-utilize-the-ws-federation-whr-parameter-to-bypass-home-realm-discovery-hrd.aspx

Here is an example:

https://login.windows.net/common/oauth2/authorize?
resource' => https://outlook.office365.com/
login_hint => urlencode(email)
WHR => https://adfs.domain.com/
state => uuid

[UPDATED workflow] Thanks.

  • 写回答

0条回答 默认 最新

    报告相同问题?