Live@EDU CPIP/Integration

Hi,

We have recently signed up to Microsoft's Live@EDU service using their Exchange Labs email flavour. Has anybody developed a CPIP or SSO integration with Live@EDU. I presume this is a Windows Live ID integration task rather than anything specific to Live@EDU.

Any pointers or samples appreciated.

Cheers,
Gareth

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

Got documentation

I had them send me the documentation and I would be happy to share. Its not specific to the portal but a starting point. I am working on creating this connector within the next couple weeks and would be happy to share when its complete. Anyone else already have this done? I should note that I am connecting with ExchangeLabs not Hotmail.

Re: live@EDU

I would be very interested in this.

Gareth

Live@Edu

We're currently looking at this also and i'd appreciate any documentation/issues you can share?

Thanks
Steve

Would love to look at the documentation

We are also looking at the live@edu service, in fact we currently have a select group of faculty/staff that are testing with it as I type. With Students coming back in the fall we are considering offering the service to a pilot group for testing there also. I would appreciate it if you could share the Doc's you have with us.

Thanks,
Kevin Byrd
byrd5@marshall.edu

Re: Got documentation

I would like to see the documentation they sent you as I just finished setting up Exchange Labs and was asked today if we could integrate with Luminis. I am looking to integrate with Luminis IV as I have a test system currently setup with OWA.

If you could post the documentation or send it to me I would greatly appreciate it.

Thanks,

Still working on it...

I am still working on it but have gotten delayed since one of my develpers left us so my workload on other projects has increased.

I know St. Johns University in New York has gotten Luminis to connect to Exchange Labs and will publish there solution soon. If you are working with a rep, ask them for St. Johns preliminary docs. As soon and I start working with it I will definitly post my findings. Hopefully within the couple weeks since I am on vacation this week!

We'd be very interested in

We'd be very interested in this whenever you have it ready. Seton Hall is going to be migrating student accounts to Live@edu sometime in the near future.

Thanks!
Mike Procopio
Web Services Developer
Seton Hall University

Thank you for your answer.

Thank you for your answer. Has your upload process been integrated into the content publication process ? I mean, does one upload his/her file at the same time he/she writes his/her message or is it a totally separate process ? If so, how does one get the url of the uploaded file ? Simply copy it at uploading time and pasting it when writing the message ?

I would like to see this too

I would like to see this too as I'm considering moving towards Live@Edu when I upgrade to Luminis IV this summer. I had some conversations a while back with Microsoft and they are very interested in actually making this work. I have not went very far with this, but Microsfot did offer to develop that connectors to make this work. You may want to talk to your Microsoft rep and see if they will offer some help. I'm planning on talking to them once I get a little closer and see of the offer is still open for the help.

Ditto

We are currently migrating to LIVE@edu. I have not yet looked at creating a connector or integrating this, but I'd be interested in what others are doing.

Thanks,
Bill

(No subject)

SSO to Exchange Labs... Done.

Well, the sound of the crickets chirping after my last post made me realize that we needed to come up with our own solution fast and we did it. We started out with the base SSO solution that they provide, which uses an IIS server to connect to exchangelabs and make the transaction. Our job essentially became how do we securely pass the username to the IIS server an get the users Mailbox to open up. The solution became simple. Luminis IV has CAS built in. We simply utilized CAS to pass a ticket to IIS, which was then processed, approved, and the Microsoft code takes over an BAM... they get into their email.

We are putting together our documentation so if you give me a few weeks I would be glad to help anyone get started. We plan to go live with Exchange Labs next week!

Exchange Labs

Melissa,
We would be interested in your documentation and code if you are willing to share. Please email to caccorso@monroecc.edu

Thanks!
Christine

Exchange Labs

We would be interested as well - emmonsc@apsu.edu.

Thanks.

2 weeks

Our new "go-live:" date is in two weeks so once we are successfull i will happily send out my notes! Testing is going well but the true test is when its live!

Good luck with your go-live date!

Hi Melissa,

Good luck with your go-live date and I hope the live 'testing' goes well.
Again we're interested in your Live@Edu SSO solution so any documentation would be great.

Thanks
Barry

Detailed solution

Finally found a plausible solution to this problem. St Johns University developed this solution http://www.codeplex.com/LuminisLiveSSO/Release/ProjectReleases.aspx?ReleaseId=15759. I'll hopefully attempt this with our installation soon.

Luminis v3.3.3114 build 114 with Live@Edu Successful!

Hi

I kept things simple and used the existing CPIP framework to do SSO. However I only implemented the sign on process and not session management (not possible) with Microsoft. I used an intermediate server (running IIS) to do the authentication for us. I pass the page on the IIS server a luminis username from the SSO server and get back a URL in the form of URL=[...] the url is something like https://login.live.com/...

The link includes the xslt generated by IIS and redirect the client to exchangelabs.com... All is working...
PS. Make sure the page on IIS is locked down to the IP Address of your SSO server.

Thanks

Glenn Aitchison
Application Technical Support Analyst/Luminis System Administrator
Victoria University
Wellington, New Zealand.

Solution and How to

We have recently setup Live@edu service for our students and looking for SSO setup from Luminis. I will appriciate if you could share your solution with us at razaat@uoh.edu.sa. thanks in advance

Using CAS / Luminis IV

Here is a snippit from some internal documentation I am putting together. Its very generalized, but I would be happy to provide more details to anyone that asked.

Microsoft provides this SSO functionality via a “portal” that is setup on a Windows server utilizing ASP.NET 2.0 and IIS. Our job is to then securely pass university credentials to the Windows server for Single Sign-On to occur. For details on Microsoft’s Single Sign-On solution, please review Windows Live Portal Email Integration v 3.5 which can be downloaded from http://connect.micrsoft.com.

I. Setup Windows Live Portal Email Integration

a. This essentially involves following the guide and confirming functionality by using a testing page (testredirect.aspx) to verify SSO is working. You will need a site number and certificate provided by Microsoft. There is a web.config file that contains all the configuration parameters unique to our university.

II. Connect MyLaSalle portal to Windows Live portal

a. By modifying the testing page provided by Microsoft, we are able to add components that can receive a CAS ticket from our mylasalle portal and pass the user ID to the Microsoft authentication systems. We named these files CASRedirect.aspx and CasRedirect.cs.

b. From the mylasalle portal, we create a link that makes a call to CAS that creates and sends a ticket to the receiving service. This link is https://inside.lasalle.edu/cas/login?service=http://myintranet.lasalle.edu:8007/public/CasRedirect.aspx

c. CasRedirect.aspx accepts the user’s username as an authenticated user and allows authentication into email.

Do you have to sync passwords?

Hello,

This might be a stupid question, but do you have to keep the passwords synchronized using the CAS solution?

We're battling a "the user can change his/her password in Hotmail without the new password coming back to our LDAP" issue... but perhaps this is irrelevant?

Thanks,
-Joe

No sync

Joe,

No passwords are passed when using CAS. All that is passed is a variable that indicated whether the student accessing the service is authenticated or not, then the Windows Live solution takes that username and uses it's trusted relationship with the Microsoft servers to send the Inbox to the students browser. The students password is never transmitted or used with this solution.

-Melissa

It worked in IE but not with Firefox

I started working on Live@EDU single sign on from Luminis. Yes, it worked for me, but only when I use IE. It did not work with Firefox. When I use Firefox it prompts a login windows. Not sure what I am doing wrong. At the SSO server we tried to decrease security and allowed Anonymous login, but it didn't work.

We are running Luminis on Solaris and SQL server 2008.

Has anyone come accross this problem?

Any help on this is appreciated.

Thank you,
Sharda

Quick Question

Thank you for this information! I find it very useful.
One thing that is still a bit unclear to me: can this be implemented using Solaris based Luminis and Oracle (without having to install IIS and/or SQL Server)?
Thnak you!

Regards,
Vladimir Mollov

Hi Vladimir, I've

Hi Vladimir,

I've implemented the Live SSO solution and we use Solaris Luminis. You don't need to have you portal running on Windows to do this, however, you do need to have an IIS machine for the Microsoft SSO solution.

You need to add keys to the registry, also the Microsoft provided solution is written in C#, so naturally that will only work on IIS.

We are moving our implementation into production this Sunday, and I will post a full how to in the week following. My implementation doesn't use AD or MS SQL at all, it just simply uses the MS code to get a Short Lived Ticket for the user. Another advantage of our implementation is that it does not allow the user any contact at all with IIS (a plus if you're concerned with security ;) ). Further more you don't need CAS (we don't even you pickup.response or CPIP) or anything other than your Luminis install and a plain vanilla Windows Server installation.

Anyways, full code and how to to follow.

Thanks
Paul

University of Ulster

Thank you!

Thank you, Paul!

code and how-to

I just read your posting from April, 09.

We are now looking (again) at a live@edu install, so I would also be interested in what you have done.  Your description sounds much easier than a couple of others I've read.

I would appreciate it if you could send me the info at your convenience.  At this point I am waiting on our network admin to get us past the first step for a test domain setup by making the dns entries, so there's probably ample time.

You can email me at:

dfonteno@meridiancc.edu

 

Thanks in advance,

 

David Fontenot

MERIDIAN COMMUNITY COLLEGE

Meridian, MS

Solution and How to

I would be grateful if you could share your solution with me at razaat@uoh.edu.sa

Thanks
Razaat H Chishty
Supervisor Technical Affairs
University of Hail
KSA

Live@edu implementation details

Paul,
I'm interested in getting some details/documentation of your Live@edu implementation. Would you mind sharing?
Is it similar to the St. John's University solution available at:

http://luminislivesso.codeplex.com/

Thanks,
Shyam

Can you please share

Paul,

We are moving to Live@edu. We are also running Luminis on Solaris. Can you please share your code or more insight on how you implemented SSO to Live@edu?

My email id is skommalapudi@stmarytx.edu

Thank you in advance.

-Sharda

Live@edu CAS Solution

Would greatly appreciate it if you would share your CasRedirect.aspx and CasRedirect.cs (or the mods you made to these files).

Email: Samir.Ghorayeb@lamarpa.edu

Samir

Saw this today

http://luminislivesso.codeplex.com/

Share...

Melissa,

We'd very much appreciate it if you are willing to share your mods/files...

Samir.Ghorayeb@lamarpa.edu

Thanks...

Luminis IV / CAS / live@EDU SSO

We are investigating potential solutions for SSO to live@EDU from Luminis IV. We will implement this Spring. I'd like to avoid the SQL DB required in the St. Johns solution. We recently enabled the Luminis CAS functionality, and I'd really like to learn more about the solution you came up with. Are you still using this approach in production?

Mellisa, could you share any additional details about your solution?

Thanks,
Chris Lewis
Web Applications Manager
Johnson & Wales University

St. John's solution

We implemented St.John's solution in codeplex. It is working fine. We had to do some tweaking to get it working though. Right now we are on Luminis IV and are planning to move to Luminis 5 by this summer. CAS does sound like a good solution. Does Live@EDU support SSO using CAS?

-Sharda

Resource

I found this in my research: http://luminislivesso.codeplex.com/
We already have SSO to exchange so I wonder how different it is to point to Edu Live.

Syndicate content