Forum Discussion
Whiteboard app on Surface Hub
MicrosoftHi Petri,
You should enable the service based on the app you're using:
- The Whiteboard app on the Hub is using space on your Office 365 OneDrive folder. It allows Hub-to-Hub collaboration only.
- The Whiteboard Preview app uses a different service in Office 365. It's not limited to the Hub only and allows any Windows 10 device that has the app installed to collaborate. Also, whiteboards in this app will keep the data until you delete them, unlike the Whiteboard app.
Both apps will require you to sign-in to Office 365 if you wish to share your whiteboard.
You can choose which app to use based on your requirements.
Signing in to Office 365 will use the same authentication process like other Office 365 apps, and therefore will require the same proxy whitelist rules.
Of course, make sure you have the right licenses assigned to your users.
Yoav ! Funny (but I'm happy) to see you on here :D
For you (and others) I get one step ahead: The sign-in process seems to have two phase authentication as it requires device authentication as well. I found this when I tried to use my Global Admin account to sign-in, and after sign-in and password I got request to verify my device by Microsoft Authentication App.
So now, I'm just trying to find the correct combination from the license point of view to get this working and also to perhaps SMS based authentication, as I have seen that also. All ideas are more than welcome as from documentation I was not able to found it (with my blind eyes).
- yoabar
Hi Petri,
I hope you're still using Internet Explorer.
Sign-in process on the Hub will register the device against Intune, which is where you'll see the "Hold on while we register this device with your company..." message.
If the Hub's device account and your account are in the same domain and your users have the appropriate licenses, you'll be able to see sign-in suggestions for your account.
Of course, for users that are enabled for MFA, the restrictions will apply.
My suggestion for your ask:
- M365 E3 (or E5 if required) for users that use the Hub, or the equivalent (Office E3\E5 and EMS or Intune.
- MFA with SMS, or streamlined authentication on the Hub with the Microsoft Authenticator app. Streamlined authentication doesn't require the user to enter their password on the Hub. making authentication more secure and easy.
Ok, so at first I need to understand what means when device's domain (sHub@internal.net) is different than user's sign-in address (myName@company.com). But at the same time my admin account's have admin@internal.net.
Previously the domains has been defined in the Intune, but today they are in M365 [Portal - Setup - Domains]. In our case the both domains are listed there. Or is there some specific place on the Intune for domains also?
If I read your comment correctly, the domains must be exactly the same? I believe that is the reason why my regular account does not wake up the device authorization process on the Surface Hub but admin account does.
MFA is not enabled, not for my admin account nor my regular account, at the moment.