Problems with WebAuthN in Microsoft Apps

Question
1

Hi all,
i am having trouble using WebAuthN with Microsoft Apps. We use shibboleth to login to Microsoft EntraID, which works relatively good. Since we are introducing Privacyidea into our Shibboleth login workflow we are encoutering problems with WebAuthN specifically. TOTP is not a problem though.

The Problem:
Upon clicking the login button in the menuMicrosoft Office Apps open a little extra window where you enter your login data. This little window seems to be a somewhat castrated webbrowser that does not respond (correctly) to WebAuthN requests. It can not link the Yubikey I use with the WebAuthN request.

Question:
Has anybody solved this problem already? Has anyone already connected a PrivacyIDEA (with Shibboleth) to EntraID? How did you solve the WebAuthN problem?

Thanks for your help!

2

hi, does that “castrated webbrowser” have a console (dev-tools, pressing F12)? There could be more information.
Or can you post a screenshot?

3

@nilsbehlen this did not lead to any results

HOWEVER: We could fix the problem by updating from End-of-Life shibboleth IDP v4 to shibboleth IDP v5. The corresponding fudiscr plugin is now also on the newest possible version and the problem is completely solved.

we are happy :wink:

4

thats good, thanks for sharing your solution.

5

I would like to reopen this issue. Although we found the fix for m365 on Windows, it appears we did not fix the issue for m365 on Mac. Has anyone out here an idea how to solve the problem for Mac? Seemingly just updating doesnt fix it so is it maybe a configuration problem?

6

hi again jaylay,
we are also interested in intregrating with entra id and are currently exporing the options we have.
do you have a guide or something on how you did it with shibboleth?
We might then be able to fix the problem on mac, if we go this route. thanks!