locked
Skype Mobile & Modern Auth RRS feed

  • Question

  • We are running S4B Server 2015 on-prem.

    We are looking at O365 in 2018 for some use cases, however S4B will stay on-prem.

    One of those use cases will be Intune.... but there I'm a little bit confused as to whether a Skype Mobile client, protected by MAM policies (no MDM), with S4B on-prem needs Modern Auth

    All of the articles indicate that MA is needed for Skype Mobile MAM and S4B online, but how about on-prem?

    https://blogs.technet.microsoft.com/intunesupport/2016/09/09/support-tip-enable-modern-authentication-in-order-to-use-intunes-mobile-application-management-mam-policies-with-skype-for-business-online/

    Thanks in advance.

    Sunday, December 24, 2017 9:10 PM

All replies

  • Hi Alex,

    Supported MA topologies in Skype for Business:

    There are potentially two server applications, and two Office 365 workloads, involved with Skype for Business topologies used by MA.

    1.Skype for Business server 2015 (CU 5) on-premises

    2.Skype for Business online (SFBO)

    3.Exchange server on-premises

    4.Exchange server online (EXO)

    Here is a document about “Skype for Business topologies supported with Modern Authentication”, please refer to
    https://technet.microsoft.com/en-us/library/mt803262.aspx


    Regards,

    Alice Wang


    Please remember to mark the replies as answers if they helped.
    If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Monday, December 25, 2017 2:24 AM
  • Thanks Alice, but that's the link I provided in my question :)

    Do you know the answers to my original question?

    Tuesday, December 26, 2017 10:46 AM
  • Hi Alex,

    For the information in my original reply, skype for business topology used by MA, it is including SFB 2015 CU5 on premise


    Regards,

    Alice Wang


    Please remember to mark the replies as answers if they helped.
    If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Thursday, December 28, 2017 2:28 AM
  • Hi the skype mobile app doesn't support Modern Authentication.

    It uses NLTM for an initial challenge then you are allocated a 8 hour TTL certificate for additional authentication requests.

    Friday, December 29, 2017 11:19 AM
  • Hi MadFerret

    Thanks, but doesn't your statement conflict with the MS article

    https://blogs.technet.microsoft.com/intunesupport/2016/09/09/support-tip-enable-modern-authentication-in-order-to-use-intunes-mobile-application-management-mam-policies-with-skype-for-business-online/

    Friday, December 29, 2017 4:38 PM
  • hi, Alex.

    The key for me is that SfB on prem doesn't need Modern Auth to work. We don't use Intune as we allow the app to be installed via BYOD and just apply a mobile policy.  I guess there's different ways to cook chicken... cheers

    Maybe if it was SfB in 0365 that may well be a requirement

    Saturday, December 30, 2017 2:04 PM
  • HI theMadferret,

    If you configure hybrid with SfB online it is possible also to use modern auth on- prem with the SfB mobile client if you have installed at least SfB CU5


    regards Holger Technical Specialist UC

    • Proposed as answer by Alice-Wang Tuesday, January 2, 2018 1:37 AM
    Sunday, December 31, 2017 11:22 AM