Shib for Skype

[Zico]

Thanks much Ioannis.
I'll give a shot with your links; seems like it's SP ( if we call 'skype' a
sp ) side configuration required to 'enable' modern authn in Skype.

On Tue, Mar 7, 2017 at 4:08 AM, Ioannis Kakavas <ikakavas at noc.grnet.gr>
wrote:

> The previous mail seems to have been lost so I'll repeat
>
> -----------------------------------------------
>
> Hi,
>
> We went through what is required to enable (ADAL support is disabled by
> default) "modern authentication" for Skype for Business recently in
> order to assist some Organizations in our federation so, assuming that
> web SSO is configured correctly
>
>  - Get a windows pc
>  - Install Skype for Business Online Connector module
> (https://technet.microsoft.com/en-us/library/dn362829(v=ocs.15).aspx)
>  - Connect to Skype for Business Online by using Windows PowerShell
> (https://technet.microsoft.com/en-us/library/dn362795.aspx)
>  - Enable modern authentication for Skype for Business Online
> (https://social.technet.microsoft.com/wiki/contents/
> articles/34339.skype-for-business-online-enable-your-tenant-for-modern-
> authentication.aspx)
>
> HTH
> Ioannis
>
> -------------------------------------------------
>
> I have verified that both ios and android skype for business apps work
> fine with SAML SSO
>
> //Ioannis
>
> On 07/03/2017 10:34 πμ, Zico wrote:
> > Thanks much Ryan and Michael for confirmation.
> > And really appreciate all of your suggestion and guidance so far.
> >
> > Thanks again!
> >
> > On Mon, Mar 6, 2017 at 4:32 PM, Michael A Grady <mgrady at unicon.net>
> wrote:
> >
> >>
> >> On Mar 6, 2017, at 4:22 PM, Ryan Suarez <ryan.suarez at sheridancollege.ca
> >
> >> wrote:
> >>
> >>
> >>
> >> Thanks for your response, Dave and Scott.
> >> Yes, O365 login is working ( as it is web based ).
> >> However that 'Skype for Business' is a desktop application.... is it
> >> possible to achieve SSO with Shibboleth for that? As far as I know...
> Shib
> >> is only for web based applications.
> >>
> >>
> >> MS thick clients are supporting what they call ‘modern authentication’
> >> which can talk SAML.  We don’t use skype specifically but we have
> confirmed
> >> it works with apps like OneDrive.  The desktop application basically
> throws
> >>  up a browser window for you to log in from shib.
> >>
> >>
> >> Fyi, I just tried the skype for business app on iphone and it does NOT
> >> work with SAML/shibboleth.
> >>
> >>
> >>
> >> There is this article that talks about scenarios where Skype mobile apps
> >> won't work today:
> >>
> >>   https://support.microsoft.com/en-us/help/3126604/skype-
> >> for-business-mobile-users-can-t-sign-in-when-modern-
> >> authentication-is-enabled
> >>
> >> --
> >> Michael A. Grady
> >> IAM Architect, Unicon, Inc.
> >>
> >>
> >>
> >>
> >
> >
> >
> >
>
> --
> ------------------------------------------------------------------
> Ioannis Kakavas - ikakavas at grnet.gr
> Identity and Security Engineer
> GRNET Network Operations Centre
> Greek Research & Technology Network - http://www.grnet.gr
> 7, Kifisias Av. 115 23 Athens, Greece
> Office: +30 2107474255
>
> PGP Fingerprint: A5AA FB5E 740A 603B FAB1 9920 D70F 0CD5 9DE3 C262
> ------------------------------------------------------------------
>
>


-- 
Best,
Zico
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170308/be4edfeb/attachment-0001.html>