none
Skype for busines for Ipads/Iphones RRS feed

  • Question

  • We currently have a single front end server with skype for business 2015 installed. Windows clients work fine and I can connect android phones as well. Ipads/Iphones will not connect either by automatic connect or if I put in the URL for connection. Is there a server side setting that we need to enable to allow these clients to connect?
    Thursday, November 21, 2019 4:48 PM

All replies

  • Hi Darren2019!

    Have you change something on Proxy Server or Edge Server?

    From your description, we recommend you troubleshoot the issue in these ways:

    1)The IOS client do not support the basic NTLM Authentication method while Windows Phone and Android  clients do, so you can verify that the UseWindowsAuth option is correctly set to Negotitate by running “Get-CsWebServiceConfiguration” cmdlet. You can refer to this article to know more details:

    https://blog.schertz.name/2012/03/lync-mobile-ios-client-authentication-issues/

    2)For the certificate, see if you can navigate to lyncdiscover.yourdomain.com and externalwebservice.yourdomain.com from Safari without an error or "Cannot Verify Server Identity" message. Check if you enable the root certificate.For more details about this problem, you can refer to the following article:

    https://community.spiceworks.com/topic/2115050-skype-for-business-on-ios

    Moreover, you could use the Lync Connectivity Analyzer to validate credentials and connectivity.

    Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.

    Best Regards,
    Jimmy Yang

    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Friday, November 22, 2019 4:44 AM
  • Hi Jimmy Yang,

    Thanks for your response. We don't have an Edge or Proxy server setup in our environment, only the Front End server. We can connect to Skype for business internally on the network or through VPN. I've checked NTLM Authentication and it's set to "Negotiate" currently. I've checked on an Ipad and IPhone and do not see the certificate mentioned in the article for "ENABLE FULL TRUST FOR ROOT CERTIFICATES" on either device. Any other ideas on why it doesn't connect for ipads/iphones and it works fine for Windows and Android based clients?

    Friday, November 22, 2019 4:13 PM
  • Hi Darren2019!

    If we want mobile device connect to Skype for business server 2015, we should deploy reverse proxy server in DMZ. All internal mobile devices and external mobile devices connect to Skype for business server 2015 by reverse proxy server. Please refer to the following link to learn more details about “Plan for Mobility for Skype for Business Server 2015”:

    https://docs.microsoft.com/en-us/skypeforbusiness/plan-your-deployment/mobility

    Best Regards,
    Jimmy Yang

    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
    Wednesday, November 27, 2019 8:53 AM
  • Hi Jimmy Yang,

    Thank you for your response. Since I only have a front end server and no edge or reverse proxy server, is the reverse proxy needed ONLY for IOS devices to connect? I can connect any android/windows device internally or through VPN to my front end server without issues. Should the IOS devices be able to connect natively to the front end server without needed a reverse proxy server setup? Is there a setting I'm missing on the front end server to allow the IOS devices to connect to the front end server while on the network? Is there something on the IOS device (iPad/iPhone) that might need to be changed (security or otherwise) that would allow the IOS device to connect to the front end server without have to put a reverse proxy server in place?

    Thank you for your time,

    Darren

    Wednesday, November 27, 2019 1:23 PM
  • Hi Darren2019

    No related document information has been found at present, if there is new content, it will be updated in time.


    Monday, December 2, 2019 11:23 AM
  • Hi Darren2019!

    I am sorry by my late!

    Question1: Is the Reverse Proxy needed Only for IOS device to connect?

    Reverse Proxy is not Only for IOS device to connect. In fact, regardless of whether a mobile device is internal or external to the network, the device always connects to the Microsoft Mobility Service externally through the reverse proxy. The following picture shows Flow of mobile application requests for Mobility Service and Autodiscover Service.


    Question2: Should the IOS devices be able to connect natively to the front end server without needed a reverse proxy server setup?

    In my research, it is definitely not supported or recommended, especially for production environment for security reasons. I found a related case about this topic, maybe you can refer to the following link:

    https://social.technet.microsoft.com/Forums/lync/en-US/434deff8-7f99-4137-be0b-1f75ecc860d9/internal-mobile-device-or-external-mobile-device-vpn-is-reverse-proxy-actually-needed

    Best Regards,
    Jimmy Yang

    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
    Wednesday, December 4, 2019 11:27 AM
  • Hi,
    Is there any update on this case?
    Please feel free to drop us a note if there is any update.
    Have a nice day!

    Best Regards,
    Jimmy Yang

    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com
    Thursday, December 12, 2019 11:13 AM
  • Here I will provide a brief and temporary summary of this post.

    <Issue Symptom >:

    We currently have a single front end server with skype for business 2015 installed. Windows clients work fine and I can connect android phones as well. Ipads/Iphones will not connect either by automatic connect or if I put in the URL for connection. Is there a server side setting that we need to enable to allow these clients to connect?

    <Possible cause>:

    1.IOS client do not support the basic NTLM Authentication method while Windows Phone and Android client do.

    2.Certificate problem

    <Troubleshooting Steps so far>:

    1.Verify that the UseWindowsAuth option is correctly set to Negotitate by running “Get-CsWebServiceConfiguration” cmdlet.

    2.Check if you can enable the root certificate

    <Next Step>:

    deploy reverse proxy server in DMZ. 

    <Reference Links>:

    https://blog.schertz.name/2012/03/lync-mobile-ios-client-authentication-issues/

    https://community.spiceworks.com/topic/2115050-skype-for-business-on-ios

    https://docs.microsoft.com/en-us/skypeforbusiness/plan-your-deployment/mobility

    https://social.technet.microsoft.com/Forums/lync/en-US/434deff8-7f99-4137-be0b-1f75ecc860d9/internal-mobile-device-or-external-mobile-device-vpn-is-reverse-proxy-actually-needed

    Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.

    Best Regards,
    Jimmy Yang

    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
    Friday, December 27, 2019 9:21 AM