Forum Discussion

Matthew Lane's avatar
Matthew Lane
Brass Contributor
Dec 06, 2016
Solved

Skye for Business App on IOS and Android Cert based Authentication to Exchange

Our Company policy dictates that we must lock down our exchange with 2 factor authentication.  So we force a pin number to our devices and configure exchange active sync to authenticate via a user ce...
client
community
devices
preview
Matthew Lane's avatar
Matthew Lane
Brass Contributor
Dec 17, 2016
I did read the blog before posting. The thread Talks about office 365 accounts (which I don't have) connecting to Skype for business using certificate based authentication. Exchange active sync already supports cert based authentication to exchange. So it wouldn't take much to update the Skype for business phone apps to support this method also. No backend changes are required it's purely an app update. I currently don't need cert based authentication for Skype business yet and again Microsoft always seems to be pushing o365. With on premise fixes coming much later
Matthew Lane's avatar
Matthew Lane
Brass Contributor
Dec 17, 2016
For some reason the reply has accepted the response as a solution. (Which its not). It's not an accepted solution as we don't have Azure (we use on premise). And also add said previous no changes are needed to the backend to resolve the issue. (Although it's pointless now as we have scrapped the idea of rolling the app to users as in its current state it's not fit for purpose as the phones do not ring when in standby (on premise). (This is already raised in another thread).
  • ivanja's avatar
    ivanja
    Icon for Microsoft rankMicrosoft
    Dec 17, 2016

    Hi Matthew,

     

    To be more precise on your ask:

     

    "We can connect to Exchange using certificates for email on the devices using the inbuilt stock email apps.  Q)  Are there any plans to implement certificate based authentication for exchange within the skype for business app ?"

     

    But i think your real question is: Skype for Business MFA with EWS  (you need ex 2016 or EXO with MA enabled for onprem)

    For CBA we are in online in preview (i think you can signup). For onpremises it's on the roadmap.

     

    Does this help?

     

     

     

     

    • Matthew Lane's avatar
      Matthew Lane
      Brass Contributor
      Jan 03, 2017
      Thanks but I don't need cert based authentication for Skype its not required in my environment. Also we are not in a position yet to upgrade to exchange 2016. Anyhow even if I did upgrade it still would not work as the App does not have the functionality to connect to exchange using a cert.

      I have exchange working via Certificate based authentication already, no need to start from fresh.
      The stock email apps connect to exchange using a cert.
      Other email applications on ios and Android can connect to exchange using a cert.
      The Skype for Business app on android and IOS does not have this functionality, signing up to the online preview will still not give me the functionality unless the insider preview has updated skype for business apps (APK) or (IPA) files which support cert based authentication for the apps.
      • Matthew Lane's avatar
        Matthew Lane
        Brass Contributor
        Oct 09, 2017

        Just to add even with Exchange 2016 configured for Certificate Based Authentication the skype for business APP for IOS and Android  does not support connecting to this configuration. 

         

        IT IS THE SKYPE 4 BUS APPLICATION THAT NEEDS TO BE UPDATED.....(to connect to exchange using CBA).

Resources