Cant retrieve BinarySecurityToken from SAML Response of Office365 operated by 21Vianet in China

Question

In our REST client, we send the SAML request to the IdP and read BinarySecurityToken from SAML response, retrieve the cookie (FedAuth & rtFa) and complete the authentication process.

The SAML response is different for Microsoft operated Office365 and 21Vianet operated Office365.

---

With Microsoft operated Office365 our REST client is able to completed authentication process as it could read the BinarySecurityToken.

Microsoft's IdP returns BinarySecurityToken and the token is used to retrieve the cookie.

Login page: https://login.microsoftonline.com

IdP URL: https://login.microsoftonline.com/extSTS.srf

---

With 21Vianet operated Office365 our REST client is unable to completed authentication process as it could not read the BinarySecurityToken.

IdP for Chinese didn't return a BinarySecurityToken. It returns encrypted data <CipherData> and it is not possible to check the contents.

Login page: https://portal.partner.microsoftonline.cn

IdP URL: https://login.partner.microsoftonline.cn/extSTS.srf

---

We would like to know how to retrieve the BinarySecurityToken from the SAML Response of Office365 operated by 21Vianet in China.

Answer 1

Hi RajeshB2926,

You are right. The authentication method is different for Microsoft operated Office 365 and 21Vianet operated Office 365. For the issue that cant retrieve BinarySecurityToken from SAML Response of Office365 operated by 21Vianet in China, I would suggest that you contact Office 365 operated by 21Vianet Support for professional support. Please click Apply for support under Office 365 support in the page: http://www.en.21vbluecloud.com/contactus.html

Thanks for your understanding.

Shirley