<div dir="ltr">Pardon me but I think I didn't understand 'tenant-wise' term. :( </div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Mar 8, 2017 at 2:19 AM, Ioannis Kakavas <span dir="ltr"><<a href="mailto:ikakavas@noc.grnet.gr" target="_blank">ikakavas@noc.grnet.gr</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Well, it's actually a tenant-wise configuration ( note that it doesn't<br>
take effect "immediately" - allow some 30' before trying it out )<br>
<br>
//Ioannis<br>
<br>
On 08/03/2017 07:48 πμ, Zico wrote:<br>
> Thanks much Ioannis.<br>
<div class="HOEnZb"><div class="h5">> I'll give a shot with your links; seems like it's SP ( if we call 'skype' a<br>
> sp ) side configuration required to 'enable' modern authn in Skype.<br>
><br>
> On Tue, Mar 7, 2017 at 4:08 AM, Ioannis Kakavas <<a href="mailto:ikakavas@noc.grnet.gr">ikakavas@noc.grnet.gr</a>><br>
> wrote:<br>
><br>
>> The previous mail seems to have been lost so I'll repeat<br>
>><br>
>> ------------------------------<wbr>-----------------<br>
>><br>
>> Hi,<br>
>><br>
>> We went through what is required to enable (ADAL support is disabled by<br>
>> default) "modern authentication" for Skype for Business recently in<br>
>> order to assist some Organizations in our federation so, assuming that<br>
>> web SSO is configured correctly<br>
>><br>
>> - Get a windows pc<br>
>> - Install Skype for Business Online Connector module<br>
>> (<a href="https://technet.microsoft.com/en-us/library/dn362829(v=ocs.15).aspx" rel="noreferrer" target="_blank">https://technet.microsoft.<wbr>com/en-us/library/dn362829(v=<wbr>ocs.15).aspx</a>)<br>
>> - Connect to Skype for Business Online by using Windows PowerShell<br>
>> (<a href="https://technet.microsoft.com/en-us/library/dn362795.aspx" rel="noreferrer" target="_blank">https://technet.microsoft.<wbr>com/en-us/library/dn362795.<wbr>aspx</a>)<br>
>> - Enable modern authentication for Skype for Business Online<br>
>> (<a href="https://social.technet.microsoft.com/wiki/contents/" rel="noreferrer" target="_blank">https://social.technet.<wbr>microsoft.com/wiki/contents/</a><br>
>> articles/34339.skype-for-<wbr>business-online-enable-your-<wbr>tenant-for-modern-<br>
>> authentication.aspx)<br>
>><br>
>> HTH<br>
>> Ioannis<br>
>><br>
>> ------------------------------<wbr>-------------------<br>
>><br>
>> I have verified that both ios and android skype for business apps work<br>
>> fine with SAML SSO<br>
>><br>
>> //Ioannis<br>
>><br>
>> On 07/03/2017 10:34 πμ, Zico wrote:<br>
>>> Thanks much Ryan and Michael for confirmation.<br>
>>> And really appreciate all of your suggestion and guidance so far.<br>
>>><br>
>>> Thanks again!<br>
>>><br>
>>> On Mon, Mar 6, 2017 at 4:32 PM, Michael A Grady <<a href="mailto:mgrady@unicon.net">mgrady@unicon.net</a>><br>
>> wrote:<br>
>>><br>
>>>><br>
>>>> On Mar 6, 2017, at 4:22 PM, Ryan Suarez <<a href="mailto:ryan.suarez@sheridancollege.ca">ryan.suarez@sheridancollege.<wbr>ca</a><br>
>>><br>
>>>> wrote:<br>
>>>><br>
>>>><br>
>>>><br>
>>>> Thanks for your response, Dave and Scott.<br>
>>>> Yes, O365 login is working ( as it is web based ).<br>
>>>> However that 'Skype for Business' is a desktop application.... is it<br>
>>>> possible to achieve SSO with Shibboleth for that? As far as I know...<br>
>> Shib<br>
>>>> is only for web based applications.<br>
>>>><br>
>>>><br>
>>>> MS thick clients are supporting what they call ‘modern authentication’<br>
>>>> which can talk SAML. We don’t use skype specifically but we have<br>
>> confirmed<br>
>>>> it works with apps like OneDrive. The desktop application basically<br>
>> throws<br>
>>>> up a browser window for you to log in from shib.<br>
>>>><br>
>>>><br>
>>>> Fyi, I just tried the skype for business app on iphone and it does NOT<br>
>>>> work with SAML/shibboleth.<br>
>>>><br>
>>>><br>
>>>><br>
>>>> There is this article that talks about scenarios where Skype mobile apps<br>
>>>> won't work today:<br>
>>>><br>
>>>> <a href="https://support.microsoft.com/en-us/help/3126604/skype-" rel="noreferrer" target="_blank">https://support.microsoft.com/<wbr>en-us/help/3126604/skype-</a><br>
>>>> for-business-mobile-users-can-<wbr>t-sign-in-when-modern-<br>
>>>> authentication-is-enabled<br>
>>>><br>
>>>> --<br>
>>>> Michael A. Grady<br>
>>>> IAM Architect, Unicon, Inc.<br>
>>>><br>
>>>><br>
>>>><br>
>>>><br>
>>><br>
>>><br>
>>><br>
>>><br>
>><br>
>> --<br>
>> ------------------------------<wbr>------------------------------<wbr>------<br>
>> Ioannis Kakavas - <a href="mailto:ikakavas@grnet.gr">ikakavas@grnet.gr</a><br>
>> Identity and Security Engineer<br>
>> GRNET Network Operations Centre<br>
>> Greek Research & Technology Network - <a href="http://www.grnet.gr" rel="noreferrer" target="_blank">http://www.grnet.gr</a><br>
>> 7, Kifisias Av. 115 23 Athens, Greece<br>
>> Office: <a href="tel:%2B30%202107474255" value="+302107474255">+30 2107474255</a><br>
>><br>
>> PGP Fingerprint: A5AA FB5E 740A 603B FAB1 9920 D70F 0CD5 9DE3 C262<br>
>> ------------------------------<wbr>------------------------------<wbr>------<br>
>><br>
>><br>
><br>
><br>
<br>
--<br>
------------------------------<wbr>------------------------------<wbr>------<br>
Ioannis Kakavas - <a href="mailto:ikakavas@grnet.gr">ikakavas@grnet.gr</a><br>
Identity and Security Engineer<br>
GRNET Network Operations Centre<br>
Greek Research & Technology Network - <a href="http://www.grnet.gr" rel="noreferrer" target="_blank">http://www.grnet.gr</a><br>
7, Kifisias Av. 115 23 Athens, Greece<br>
Office: <a href="tel:%2B30%202107474255" value="+302107474255">+30 2107474255</a><br>
<br>
PGP Fingerprint: A5AA FB5E 740A 603B FAB1 9920 D70F 0CD5 9DE3 C262<br>
------------------------------<wbr>------------------------------<wbr>------<br>
<br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature">Best,<br>Zico</div>
</div>