
Our customers will use their WAAD identity as their primary identity.

We would like to achieve this without the need for ADFS. Is this currently impossible with SharePoint Online or has someone achieved something similar? Perhaps we have missed something fundamental. If you need to restore a Microsoft 365 hybrid user account which was synced from on-premises Active Directory to Azure AD and Microsoft 365, you need to perform the following steps. To set up a trust so that the SAML token can be exchanged for an Office 365 service token which will grant our application access to SharePoint Online web services in the context of the logged on user? This seems like a sensible scenario for single sign onīut as yet we have not been successful in getting it to work. Because the user is already authenticated using WAAD, is there any way to use this information to authenticate with Office 365. WAAD at the front end, the ideal scenario would be to sign on to SharePoint Online without having to pass credentials. Historically we have connected to these services remotely by passing the user credentials (username and password) and extracting the service token from the response. The application consumes services from SharePoint Online. We have recently added WAAD as an identity provider and users can successfully log onto our application using their Office 365 cloud identity. However, if needs be we can use our own custom STS within our app in order to solve this problem. We use ACS to provide authentication to this application.

The scenario we have is that we have an ASP.Net application which runs on Azure.

We have a question concerning WAAD and single sign on to Office 365 Services.
