Shib for Skype

[Zico]

Pardon me but I think I didn't understand 'tenant-wise' term. :(

On Wed, Mar 8, 2017 at 2:19 AM, Ioannis Kakavas <ikakavas at noc.grnet.gr>
wrote:

> Well, it's actually a tenant-wise configuration ( note that it doesn't
> take effect "immediately" - allow some 30' before trying it out )
>
> //Ioannis
>
> On 08/03/2017 07:48 πμ, Zico wrote:
> > Thanks much Ioannis.
> > I'll give a shot with your links; seems like it's SP ( if we call
> 'skype' a
> > sp ) side configuration required to 'enable' modern authn in Skype.
> >
> > On Tue, Mar 7, 2017 at 4:08 AM, Ioannis Kakavas <ikakavas at noc.grnet.gr>
> > wrote:
> >
> >> The previous mail seems to have been lost so I'll repeat
> >>
> >> -----------------------------------------------
> >>
> >> Hi,
> >>
> >> We went through what is required to enable (ADAL support is disabled by
> >> default) "modern authentication" for Skype for Business recently in
> >> order to assist some Organizations in our federation so, assuming that
> >> web SSO is configured correctly
> >>
> >>  - Get a windows pc
> >>  - Install Skype for Business Online Connector module
> >> (https://technet.microsoft.com/en-us/library/dn362829(v=ocs.15).aspx)
> >>  - Connect to Skype for Business Online by using Windows PowerShell
> >> (https://technet.microsoft.com/en-us/library/dn362795.aspx)
> >>  - Enable modern authentication for Skype for Business Online
> >> (https://social.technet.microsoft.com/wiki/contents/
> >> articles/34339.skype-for-business-online-enable-your-tenant-for-modern-
> >> authentication.aspx)
> >>
> >> HTH
> >> Ioannis
> >>
> >> -------------------------------------------------
> >>
> >> I have verified that both ios and android skype for business apps work
> >> fine with SAML SSO
> >>
> >> //Ioannis
> >>
> >> On 07/03/2017 10:34 πμ, Zico wrote:
> >>> Thanks much Ryan and Michael for confirmation.
> >>> And really appreciate all of your suggestion and guidance so far.
> >>>
> >>> Thanks again!
> >>>
> >>> On Mon, Mar 6, 2017 at 4:32 PM, Michael A Grady <mgrady at unicon.net>
> >> wrote:
> >>>
> >>>>
> >>>> On Mar 6, 2017, at 4:22 PM, Ryan Suarez <ryan.suarez at sheridancollege.
> ca
> >>>
> >>>> wrote:
> >>>>
> >>>>
> >>>>
> >>>> Thanks for your response, Dave and Scott.
> >>>> Yes, O365 login is working ( as it is web based ).
> >>>> However that 'Skype for Business' is a desktop application.... is it
> >>>> possible to achieve SSO with Shibboleth for that? As far as I know...
> >> Shib
> >>>> is only for web based applications.
> >>>>
> >>>>
> >>>> MS thick clients are supporting what they call ‘modern authentication’
> >>>> which can talk SAML.  We don’t use skype specifically but we have
> >> confirmed
> >>>> it works with apps like OneDrive.  The desktop application basically
> >> throws
> >>>>  up a browser window for you to log in from shib.
> >>>>
> >>>>
> >>>> Fyi, I just tried the skype for business app on iphone and it does NOT
> >>>> work with SAML/shibboleth.
> >>>>
> >>>>
> >>>>
> >>>> There is this article that talks about scenarios where Skype mobile
> apps
> >>>> won't work today:
> >>>>
> >>>>   https://support.microsoft.com/en-us/help/3126604/skype-
> >>>> for-business-mobile-users-can-t-sign-in-when-modern-
> >>>> authentication-is-enabled
> >>>>
> >>>> --
> >>>> Michael A. Grady
> >>>> IAM Architect, Unicon, Inc.
> >>>>
> >>>>
> >>>>
> >>>>
> >>>
> >>>
> >>>
> >>>
> >>
> >> --
> >> ------------------------------------------------------------------
> >> Ioannis Kakavas - ikakavas at grnet.gr
> >> Identity and Security Engineer
> >> GRNET Network Operations Centre
> >> Greek Research & Technology Network - http://www.grnet.gr
> >> 7, Kifisias Av. 115 23 Athens, Greece
> >> Office: +30 2107474255
> >>
> >> PGP Fingerprint: A5AA FB5E 740A 603B FAB1 9920 D70F 0CD5 9DE3 C262
> >> ------------------------------------------------------------------
> >>
> >>
> >
> >
>
> --
> ------------------------------------------------------------------
> Ioannis Kakavas - ikakavas at grnet.gr
> Identity and Security Engineer
> GRNET Network Operations Centre
> Greek Research & Technology Network - http://www.grnet.gr
> 7, Kifisias Av. 115 23 Athens, Greece
> Office: +30 2107474255
>
> PGP Fingerprint: A5AA FB5E 740A 603B FAB1 9920 D70F 0CD5 9DE3 C262
> ------------------------------------------------------------------
>
>


-- 
Best,
Zico
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170308/e4621319/attachment.html>