certificate: request webticket from login.microsoftonline.com
Log files taken with the official Lync client against an Office365
account have shown the following procedure:
- request WsFed_bearer ticket from login.microsoftonline.com
- SOAP request has to use old "Passport" technology
- portal only accepts UsernameToken with cleartext password(???)
- use the provided ticket to authenticate against CertProv Service
The communication to the portal is protected with HTTPS but the password
will appear as cleartext in the pidgin log file :-(