...
In addition, the Office 365 application set up in your DualShield server must have 2 logon procedures, one for Web SSO and the other for ECP Enhanced Client
The logon procedure for ECP must have one logon step with "Static Password" as its authentication method
...