Shib for Skype

[Ioannis Kakavas]

Well, it's actually a tenant-wise configuration ( note that it doesn't
take effect "immediately" - allow some 30' before trying it out )

//Ioannis

On 08/03/2017 07:48 πμ, Zico wrote:
> Thanks much Ioannis.
> I'll give a shot with your links; seems like it's SP ( if we call 'skype' a
> sp ) side configuration required to 'enable' modern authn in Skype.
> 
> On Tue, Mar 7, 2017 at 4:08 AM, Ioannis Kakavas <ikakavas at noc.grnet.gr>
> wrote:
> 
>> The previous mail seems to have been lost so I'll repeat
>>
>> -----------------------------------------------
>>
>> Hi,
>>
>> We went through what is required to enable (ADAL support is disabled by
>> default) "modern authentication" for Skype for Business recently in
>> order to assist some Organizations in our federation so, assuming that
>> web SSO is configured correctly
>>
>>  - Get a windows pc
>>  - Install Skype for Business Online Connector module
>> (https://technet.microsoft.com/en-us/library/dn362829(v=ocs.15).aspx)
>>  - Connect to Skype for Business Online by using Windows PowerShell
>> (https://technet.microsoft.com/en-us/library/dn362795.aspx)
>>  - Enable modern authentication for Skype for Business Online
>> (https://social.technet.microsoft.com/wiki/contents/
>> articles/34339.skype-for-business-online-enable-your-tenant-for-modern-
>> authentication.aspx)
>>
>> HTH
>> Ioannis
>>
>> -------------------------------------------------
>>
>> I have verified that both ios and android skype for business apps work
>> fine with SAML SSO
>>
>> //Ioannis
>>
>> On 07/03/2017 10:34 πμ, Zico wrote:
>>> Thanks much Ryan and Michael for confirmation.
>>> And really appreciate all of your suggestion and guidance so far.
>>>
>>> Thanks again!
>>>
>>> On Mon, Mar 6, 2017 at 4:32 PM, Michael A Grady <mgrady at unicon.net>
>> wrote:
>>>
>>>>
>>>> On Mar 6, 2017, at 4:22 PM, Ryan Suarez <ryan.suarez at sheridancollege.ca
>>>
>>>> wrote:
>>>>
>>>>
>>>>
>>>> Thanks for your response, Dave and Scott.
>>>> Yes, O365 login is working ( as it is web based ).
>>>> However that 'Skype for Business' is a desktop application.... is it
>>>> possible to achieve SSO with Shibboleth for that? As far as I know...
>> Shib
>>>> is only for web based applications.
>>>>
>>>>
>>>> MS thick clients are supporting what they call ‘modern authentication’
>>>> which can talk SAML.  We don’t use skype specifically but we have
>> confirmed
>>>> it works with apps like OneDrive.  The desktop application basically
>> throws
>>>>  up a browser window for you to log in from shib.
>>>>
>>>>
>>>> Fyi, I just tried the skype for business app on iphone and it does NOT
>>>> work with SAML/shibboleth.
>>>>
>>>>
>>>>
>>>> There is this article that talks about scenarios where Skype mobile apps
>>>> won't work today:
>>>>
>>>>   https://support.microsoft.com/en-us/help/3126604/skype-
>>>> for-business-mobile-users-can-t-sign-in-when-modern-
>>>> authentication-is-enabled
>>>>
>>>> --
>>>> Michael A. Grady
>>>> IAM Architect, Unicon, Inc.
>>>>
>>>>
>>>>
>>>>
>>>
>>>
>>>
>>>
>>
>> --
>> ------------------------------------------------------------------
>> Ioannis Kakavas - ikakavas at grnet.gr
>> Identity and Security Engineer
>> GRNET Network Operations Centre
>> Greek Research & Technology Network - http://www.grnet.gr
>> 7, Kifisias Av. 115 23 Athens, Greece
>> Office: +30 2107474255
>>
>> PGP Fingerprint: A5AA FB5E 740A 603B FAB1 9920 D70F 0CD5 9DE3 C262
>> ------------------------------------------------------------------
>>
>>
> 
> 

-- 
------------------------------------------------------------------
Ioannis Kakavas - ikakavas at grnet.gr
Identity and Security Engineer
GRNET Network Operations Centre
Greek Research & Technology Network - http://www.grnet.gr
7, Kifisias Av. 115 23 Athens, Greece
Office: +30 2107474255

PGP Fingerprint: A5AA FB5E 740A 603B FAB1 9920 D70F 0CD5 9DE3 C262
------------------------------------------------------------------

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://shibboleth.net/pipermail/users/attachments/20170308/2c529fea/attachment.sig>