Shib for Skype

[Dave Perry]

Old news maybe, but tenant is like ‘your organisation’s area on the Microsoft cloud’, similar to a person having tenancy of a house or a company renting an office. Think of being able to change things tenant-wide like being in control of a system.
Most organisations have one usually, but I think you can have a test one alongside a live – although don’t quote me on that.

Dave
_________________________________________________
Dave Perry
eLearning Technologist, Hull College Group (Monday – Thursday)

Room L34 - Queens Gardens Library
Wilberforce Drive, Queen's Gardens, Hull, HU1 3DG
Extension 2230 / Direct Dial 01482 381930

How are we doing? Please take part in our annual user survey:
Staff survey<http://library.hull-college.ac.uk/staffsurvey/> | Student survey<http://library.hull-college.ac.uk/survey/>

* Need a fast reply? Try elearning at hull-college.ac.uk<mailto:elearning at hull-college.ac.uk> *

From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Zico
Sent: 08 March 2017 08:00
To: Ioannis Kakavas
Cc: Shib Users
Subject: Re: Shib for Skype

Pardon me but I think I didn't understand 'tenant-wise' term. :(

On Wed, Mar 8, 2017 at 2:19 AM, Ioannis Kakavas <ikakavas at noc.grnet.gr<mailto:ikakavas at noc.grnet.gr>> wrote:
Well, it's actually a tenant-wise configuration ( note that it doesn't
take effect "immediately" - allow some 30' before trying it out )

//Ioannis

On 08/03/2017 07:48 πμ, Zico wrote:
> Thanks much Ioannis.
> I'll give a shot with your links; seems like it's SP ( if we call 'skype' a
> sp ) side configuration required to 'enable' modern authn in Skype.
>
> On Tue, Mar 7, 2017 at 4:08 AM, Ioannis Kakavas <ikakavas at noc.grnet.gr<mailto:ikakavas at noc.grnet.gr>>
> wrote:
>
>> The previous mail seems to have been lost so I'll repeat
>>
>> -----------------------------------------------
>>
>> Hi,
>>
>> We went through what is required to enable (ADAL support is disabled by
>> default) "modern authentication" for Skype for Business recently in
>> order to assist some Organizations in our federation so, assuming that
>> web SSO is configured correctly
>>
>>  - Get a windows pc
>>  - Install Skype for Business Online Connector module
>> (https://technet.microsoft.com/en-us/library/dn362829(v=ocs.15).aspx)
>>  - Connect to Skype for Business Online by using Windows PowerShell
>> (https://technet.microsoft.com/en-us/library/dn362795.aspx)
>>  - Enable modern authentication for Skype for Business Online
>> (https://social.technet.microsoft.com/wiki/contents/
>> articles/34339.skype-for-business-online-enable-your-tenant-for-modern-
>> authentication.aspx)
>>
>> HTH
>> Ioannis
>>
>> -------------------------------------------------
>>
>> I have verified that both ios and android skype for business apps work
>> fine with SAML SSO
>>
>> //Ioannis
>>
>> On 07/03/2017 10:34 πμ, Zico wrote:
>>> Thanks much Ryan and Michael for confirmation.
>>> And really appreciate all of your suggestion and guidance so far.
>>>
>>> Thanks again!
>>>
>>> On Mon, Mar 6, 2017 at 4:32 PM, Michael A Grady <mgrady at unicon.net<mailto:mgrady at unicon.net>>
>> wrote:
>>>
>>>>
>>>> On Mar 6, 2017, at 4:22 PM, Ryan Suarez <ryan.suarez at sheridancollege.ca<mailto:ryan.suarez at sheridancollege.ca>
>>>
>>>> wrote:
>>>>
>>>>
>>>>
>>>> Thanks for your response, Dave and Scott.
>>>> Yes, O365 login is working ( as it is web based ).
>>>> However that 'Skype for Business' is a desktop application.... is it
>>>> possible to achieve SSO with Shibboleth for that? As far as I know...
>> Shib
>>>> is only for web based applications.
>>>>
>>>>
>>>> MS thick clients are supporting what they call ‘modern authentication’
>>>> which can talk SAML.  We don’t use skype specifically but we have
>> confirmed
>>>> it works with apps like OneDrive.  The desktop application basically
>> throws
>>>>  up a browser window for you to log in from shib.
>>>>
>>>>
>>>> Fyi, I just tried the skype for business app on iphone and it does NOT
>>>> work with SAML/shibboleth.
>>>>
>>>>
>>>>
>>>> There is this article that talks about scenarios where Skype mobile apps
>>>> won't work today:
>>>>
>>>>   https://support.microsoft.com/en-us/help/3126604/skype-
>>>> for-business-mobile-users-can-t-sign-in-when-modern-
>>>> authentication-is-enabled
>>>>
>>>> --
>>>> Michael A. Grady
>>>> IAM Architect, Unicon, Inc.
>>>>
>>>>
>>>>
>>>>
>>>
>>>
>>>
>>>
>>
>> --
>> ------------------------------------------------------------------
>> Ioannis Kakavas - ikakavas at grnet.gr<mailto:ikakavas at grnet.gr>
>> Identity and Security Engineer
>> GRNET Network Operations Centre
>> Greek Research & Technology Network - http://www.grnet.gr
>> 7, Kifisias Av. 115 23 Athens, Greece
>> Office: +30 2107474255<tel:%2B30%202107474255>
>>
>> PGP Fingerprint: A5AA FB5E 740A 603B FAB1 9920 D70F 0CD5 9DE3 C262
>> ------------------------------------------------------------------
>>
>>
>
>

--
------------------------------------------------------------------
Ioannis Kakavas - ikakavas at grnet.gr<mailto:ikakavas at grnet.gr>
Identity and Security Engineer
GRNET Network Operations Centre
Greek Research & Technology Network - http://www.grnet.gr
7, Kifisias Av. 115 23 Athens, Greece
Office: +30 2107474255<tel:%2B30%202107474255>

PGP Fingerprint: A5AA FB5E 740A 603B FAB1 9920 D70F 0CD5 9DE3 C262
------------------------------------------------------------------



--
Best,
Zico

**********************************************************************
This message is sent in confidence for the addressee
only. It may  contain confidential or sensitive
information.  The contents are not to be disclosed
to anyone other than the addressee.  Unauthorised
recipients are requested to preserve this
confidentiality and to advise us of any errors in
transmission.  Any views expressed in this message
are solely the views of the individual and do not
represent the views of the College.  Nothing in this
message should be construed as creating a contract.

Hull College Group owns the email infrastructure, including the contents.

Hull College Group is committed to sustainability, please reflect before printing this email.
**********************************************************************

TEXT
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170329/f06d9b07/attachment-0001.html>