Shib for Skype

[Ioannis Kakavas]

The previous mail seems to have been lost so I'll repeat

-----------------------------------------------

Hi,

We went through what is required to enable (ADAL support is disabled by
default) "modern authentication" for Skype for Business recently in
order to assist some Organizations in our federation so, assuming that
web SSO is configured correctly

 - Get a windows pc
 - Install Skype for Business Online Connector module
(https://technet.microsoft.com/en-us/library/dn362829(v=ocs.15).aspx)
 - Connect to Skype for Business Online by using Windows PowerShell
(https://technet.microsoft.com/en-us/library/dn362795.aspx)
 - Enable modern authentication for Skype for Business Online
(https://social.technet.microsoft.com/wiki/contents/articles/34339.skype-for-business-online-enable-your-tenant-for-modern-authentication.aspx)

HTH
Ioannis

-------------------------------------------------

I have verified that both ios and android skype for business apps work
fine with SAML SSO

//Ioannis

On 07/03/2017 10:34 πμ, Zico wrote:
> Thanks much Ryan and Michael for confirmation.
> And really appreciate all of your suggestion and guidance so far.
> 
> Thanks again!
> 
> On Mon, Mar 6, 2017 at 4:32 PM, Michael A Grady <mgrady at unicon.net> wrote:
> 
>>
>> On Mar 6, 2017, at 4:22 PM, Ryan Suarez <ryan.suarez at sheridancollege.ca>
>> wrote:
>>
>>
>>
>> Thanks for your response, Dave and Scott.
>> Yes, O365 login is working ( as it is web based ).
>> However that 'Skype for Business' is a desktop application.... is it
>> possible to achieve SSO with Shibboleth for that? As far as I know... Shib
>> is only for web based applications.
>>
>>
>> MS thick clients are supporting what they call ‘modern authentication’
>> which can talk SAML.  We don’t use skype specifically but we have confirmed
>> it works with apps like OneDrive.  The desktop application basically throws
>>  up a browser window for you to log in from shib.
>>
>>
>> Fyi, I just tried the skype for business app on iphone and it does NOT
>> work with SAML/shibboleth.
>>
>>
>>
>> There is this article that talks about scenarios where Skype mobile apps
>> won't work today:
>>
>>   https://support.microsoft.com/en-us/help/3126604/skype-
>> for-business-mobile-users-can-t-sign-in-when-modern-
>> authentication-is-enabled
>>
>> --
>> Michael A. Grady
>> IAM Architect, Unicon, Inc.
>>
>>
>>
>>
> 
> 
> 
> 

-- 
------------------------------------------------------------------
Ioannis Kakavas - ikakavas at grnet.gr
Identity and Security Engineer
GRNET Network Operations Centre
Greek Research & Technology Network - http://www.grnet.gr
7, Kifisias Av. 115 23 Athens, Greece
Office: +30 2107474255

PGP Fingerprint: A5AA FB5E 740A 603B FAB1 9920 D70F 0CD5 9DE3 C262
------------------------------------------------------------------

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://shibboleth.net/pipermail/users/attachments/20170307/73662d52/attachment-0001.sig>