Forum Discussion
Skye for Business App on IOS and Android Cert based Authentication to Exchange
PLease take a look at this:
To answer your question : Yes
Thanks for the link but we have all on premise (no azure). We have also scrapped the rollout of skype for business on mobiles as its not fit for purpose.
Such as not be able to answer repsonse groups.
Response groups ringing on the mobile app. (if its not supported why ring).
No connection to exchange via certificates. plus many other minor issues.
Until it has basic functionality and not erroring because the app can't connect to exchange and not being able to answer the phone when it rings (response groups). its not fit for purpose so have decided to scrap it for now, We may re-visit the mobile phone side functionality in a couple of years.
MicrosoftHi Matthew,
PLease watch this recording on ignite from one of our PM's.
https://myignite.microsoft.com/sessions/53262?source=sessions
It explains the roadmap for onprem customers only (it's coming)
As for SfB RGS you are correct, we should not ring if it's not supported.
Let me know if the recording answers your auth questions in any way.
Ivan
yes the video was very enlightening. A very informative roadmap of whats to come. It would be pointless to go down this route though as we would need still need to setup a new Skype for Business Server and go down the modern authentication path., Create at least 1 account for azure (possibly 10 accounts for Admins to use). A new Exchange server. and even when we do that the on premise Exchange and Skype still does not fully support the mobile skype for business client. Also this is far too much work (I dont even require modern auth). I just need the skype for business application on the mobile phone be able to authenticate to the exchange server in the same way which other stock apps already authenticate to exchange using Certificate Based Authentication.
Surely the people who write the code for the skype for business application can add some code to connect to exchange using a user Certificate. Maybe Microsoft should fix CBA before moving onto MA
- ivanja
Matthew,
Just to understand your requirement precise. You are searching for a solution where you have CBA enabled for EWS and expect SfB to leverage that? Because SfB leverages EWS.
I believe on your exchange setup you enabled CBA only for activesync. Is it a hard requirements that EWS needs to be protected by CBA?
Yes that's exactly my predicament. We have Certificate Based Authentication configured only for Exchange Active Sync and yes unfortunately this is a requirement.
And yes we would like the Skype for Business app to also be able to connect to the EWS for Exchange Active Sync using the same method (CBA).