Expand your Outlook. We've developed a suite of premium Outlook features for people with advanced email and calendar needs. A Microsoft 365 subscription offers an ad-free interface, custom domains, enhanced security options, the full desktop version of Office, and 1 TB of cloud storage. Nov 09, 2020 Sign into McGill's Office 365 portal The Office 365 portal gives students, faculty and staff members access to McGill Email (OneDrive for Business cloud file storage, Office 365 ProPlus software, and a number of other useful cloud-based apps for content authoring and collaboration.
We have changed up the photo on the McGill signin page... here's hoping for another few weeks of autumn!
Are you an amateur photographer?
If you have beautiful photos of campus that you would like featured on McGill's signin page, you can post them to the Office 365 Photo Contest group on Yammer. We aim to replace the photo at least 4 times per year, as the seasons change.
The Office 365 portal gives students, faculty and staff members access to McGill Email (https://outlook.com/mcgill.ca), OneDrive for Business cloud file storage, Office 365 ProPlus software, and a number of other useful cloud-based apps for content authoring and collaboration.
Sign into the Office 365 portal at: https://office.com
Last year McGill accepted an offer from Microsoft to move our existing Office 365 content from their U.S. data centers to their newly enabled Canadian data centers. Although using Microsoft's cloud-based data centers in the U.S. did not pose any security concerns, once their Canadian data centers were made available to us, we gladly agreed to move our data to Canadian soil, where we will continue to benefit from robust reliability, security, and privacy of industry standards, such as ISO 27001, ISO 27018, SOC 1 and SOC 2.
PROBLEM
A federated user can't authenticate to Microsoft Outlook or to Microsoft Exchange ActiveSync by using a smartphone in Exchange Online.
CAUSE
This issue can occur if one of the following conditions is true:
The on-premises Active Directory Federation Services (AD FS) 2.0 federation service isn't available from the public Internet.
The Secure Sockets Layer (SSL) certificate that's used by the AD FS 2.0 endpoint is issued by a certification authority that isn't trusted by the Exchange Online data center.
The current Exchange Online endpoint for Outlook uses Basic Authentication or Proxy Authentication. This means that Outlook clients authenticate to the Outlook.com service by using Basic Authentication. If Outlook.com determines that the user is a federated user, it proxies the Basic Authentication over SSL to the user's AD FS 2.0 server on behalf of the client. This action authenticates the user locally and requests a Security Assertion Markup Language (SAML) claim or access token for the user. If a publically available AD FS 2.0 endpoint isn't available, the authentication process isn't successful, and the user is denied access to the service endpoint.
Use Microsoft Remote Connectivity Analyzer to test whether the on-premises AD FS 2.0 federation service is causing Outlook logon problems for federated users. To do this, follow these steps:
In Internet Explorer, browse to https://www.testconnectivity.microsoft.com/?testid=O365Ola.
Type the email address and credentials, click to select the acknowledgement check box near the bottom of the page, type the verification code, and then click Perform Test. This test should be run two times. Run the test by using each of the following credentials:
A federated account that has a mailbox in Exchange Online
A standard user account that has a mailbox in Exchange Online
Check the results of both tests to determine whether AD FS 2.0 is causing the Outlook sign-in issue.
a. Drill down to the following node of the Test Details tree:
Testing RPC/HTTP connectivity
- ExRCA is attempting to test Autodiscover for john@contoso.com
- Attempting each method of contacting the Autodiscover service
- Attempting to contact the Autodiscover service using the HTTP redirect method
- Attempting to send an Autodiscover POST request to potential Autodiscover URLs
- ExRCA is attempting to retrieve and XML Autodiscover response from URL htts://autodiscover-s.outlook.com/Autodiscover/Autodiscover.xml for user
b. Check whether both the following conditions are true:The federated account can't access Autodiscover and receives an 'HTTP 401 authorized response' error message.
The standard user account can access Autodiscover.
If both conditions are true, you have confirmed that SSO failures are causing Outlook authentication to fail.
SOLUTION
To fix this issue, use one of the following methods, as appropriate for your situation:
Method 1: Expose the on-premises AD FS 2.0 federation service to the Internet
Set up an AD FS 2.0 federation server proxy for the on-premises AD FS 2.0 environment (or set up a firewall reverse proxy of the AD FS 2.0 Federation Service) that supports SSO, and then publish the proxy to the Internet.
For more info about the AD FS 2.0 federation server proxy implementation, go to the following Microsoft website:
Method 2: Troubleshoot problems with the AD FS 2.0 proxy server
For more info about how to troubleshoot AD FS 2.0 proxy server issues, see the following Microsoft Knowledge Base article:
2712961 How to troubleshoot AD FS endpoint connection issues when users sign in to Office 365, Intune, or Azure
REFERENCES
Outlook 365 Mcgill Sign In
Still need help? Go to the Microsoft Community website.