Forum Discussion
Matthew Lane
Dec 06, 2016Brass Contributor
Skye for Business App on IOS and Android Cert based Authentication to Exchange
Our Company policy dictates that we must lock down our exchange with 2 factor authentication. So we force a pin number to our devices and configure exchange active sync to authenticate via a user ce...
- Dec 16, 2016
PLease take a look at this:
To answer your question : Yes
ivanja
Microsoft
Dec 16, 2016PLease take a look at this:
To answer your question : Yes
Matthew Lane
Dec 17, 2016Brass Contributor
I did read the blog before posting. The thread Talks about office 365 accounts (which I don't have) connecting to Skype for business using certificate based authentication. Exchange active sync already supports cert based authentication to exchange. So it wouldn't take much to update the Skype for business phone apps to support this method also. No backend changes are required it's purely an app update. I currently don't need cert based authentication for Skype business yet and again Microsoft always seems to be pushing o365. With on premise fixes coming much later
- Matthew LaneDec 17, 2016Brass ContributorFor some reason the reply has accepted the response as a solution. (Which its not). It's not an accepted solution as we don't have Azure (we use on premise). And also add said previous no changes are needed to the backend to resolve the issue. (Although it's pointless now as we have scrapped the idea of rolling the app to users as in its current state it's not fit for purpose as the phones do not ring when in standby (on premise). (This is already raised in another thread).
- ivanjaDec 17, 2016
Microsoft
Hi Matthew,
To be more precise on your ask:
"We can connect to Exchange using certificates for email on the devices using the inbuilt stock email apps. Q) Are there any plans to implement certificate based authentication for exchange within the skype for business app ?"
But i think your real question is: Skype for Business MFA with EWS (you need ex 2016 or EXO with MA enabled for onprem)
For CBA we are in online in preview (i think you can signup). For onpremises it's on the roadmap.
Does this help?
- Matthew LaneJan 03, 2017Brass ContributorThanks but I don't need cert based authentication for Skype its not required in my environment. Also we are not in a position yet to upgrade to exchange 2016. Anyhow even if I did upgrade it still would not work as the App does not have the functionality to connect to exchange using a cert.
I have exchange working via Certificate based authentication already, no need to start from fresh.
The stock email apps connect to exchange using a cert.
Other email applications on ios and Android can connect to exchange using a cert.
The Skype for Business app on android and IOS does not have this functionality, signing up to the online preview will still not give me the functionality unless the insider preview has updated skype for business apps (APK) or (IPA) files which support cert based authentication for the apps.