locked
exchange online Modern Authentication with Skype for business on premise RRS feed

  • Question

  • We are working on enabling modern authentication in exchange online and we have Skype for business on premise environment. We would like to know if its supported from Microsoft to enable MA on EXO (without enabling MFA). We have reached out to Microsoft premier support to confirm, as per them Skype4B Mobile is not supported in this scenario (skype4B mobile devices might have issues connecting to EWS).

    I have referred multiple technet articles but its not very clear on the support. 

    https://technet.microsoft.com/en-us/library/mt803262.aspx
    https://support.microsoft.com/en-gb/help/3126604/skype-for-business-mobile-users-can-t-sign-in-when-modern-authenticati (This article is not very clear to me if skype4B mobile not supported with MA or when MA and MFA both enabled).

    Is there any other limitations in this setup to enable MA on exchange online. I already read there are some limitations with Polycom devices (only VVX devices now supports MA with latest firmware).

    Skype4B windows client already have workaround in place

    Could you someone provide some more details on this?


    Ganesh Puthran


    Monday, July 10, 2017 1:11 PM

All replies

  • Hi Ganesh Puthran,

    Yes, like Microsoft premier said, if you use modern authentication, it will break the integration between Exchange and Skype for business.

    Modern Authentication for Skype for Business Server 2015 was released in the March 2016 Cumulative Update (CU2). However, this is only supported for the Windows client without Exchange integration support. There is no workaround to add Exchange integration support so far.

    Here is a blog describes the limitations with modern authentication, please refer to
    https://ucvnext.org/2016/02/office365-modern-authentication-skype4b-hybrid-exchange-hybrid/

    Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.


    Regards,

    Alice Wang


    Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Proposed as answer by Alice-Wang Monday, July 17, 2017 9:59 AM
    Tuesday, July 11, 2017 2:27 AM
  • You need to setup oAuth between Skype for Business server and Exchange online. As for Polycom VVX, MA won't work if you use PIN and Extension to sign in. You need to use AD credentials to sign in to the device. BToE would be the best option. 


    http://thamaraw.com

    Tuesday, July 11, 2017 2:30 AM