[Libreoffice-bugs] [Bug 136560] New: LibreOffice should support Office Forms Based Authentication Protocol

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=136560

            Bug ID: 136560
           Summary: LibreOffice should support Office Forms Based
                    Authentication Protocol
           Product: LibreOffice
           Version: unspecified
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Severity: enhancement
          Priority: medium
         Component: framework
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: mikko.lehtisalo at gmail.com

Description:
Apparently LibreOffice doesn't support OFBA. Support for it should be added
because it offers high usability for complex authentication setups. For example
OpenID identity provider can be used for WebDav, making proper popups for the
authentication.

See
https://docs.microsoft.com/en-us/openspecs/sharepoint_protocols/ms-ofba/30c7bbe9-b284-421f-b866-4e7ed4866027
for the open specification.

Steps to Reproduce:
1. Open a document from webdav resource that utilizes OFBA


Actual Results:
1. Get an access denied error

Expected Results:
1. User accesses something like SharePoint Server, and opens a document.
2. Since gssapi/kerberos failed, the application falls back to OFBA.
3. OFBA popup asks local authentication (typically ADFS based openid provider)
4. Authentication cookie gets saved
5. Authentication to webdav succeeds based on the previous steps
6. ... 
7. Profit!


Reproducible: Always


User Profile Reset: No



Additional Info:
OFBA is the most common authentication setup for accessing and editing
documents while using Office 365 products in multitenant environments. It
really rocks.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20200907/bfb09234/attachment-0001.htm>