Office365 Exchange protocols with APM and SAML

Hi Michael, Thanks for the info. Yep, we've read that document. What we are trying to understand at this point, when discussing with the customer about how this solution will work, is what is happening under the covers to make this work. If you take Activesync as an example, we all know it only supports Client certificate and Basic authentication. So how can SAML work in this case? I can only assume that what is happening under the covers is that Office365 is acting as a "SAML broker" by contacting the SAML iDP on behalf of the client who can't fulfil a 302 redirect request. Can you confirm that this is the case? And if so, are you aware of any Microsoft documentation that describes this process. Regards, MiLK_MaN --- who used to idolise you as a F5 PS resource :)