Support Tip: Enable modern auth to use Intune's MAM policies with Skype for Business Online

Published Oct 30 2018 11:09 AM 533 Views

First published on TechNet on Sep 09, 2016

Friction-free use of apps and services that matter to you is important to us. So, we want to make you aware of a requirement for Skype for Business (SfB) Online to work with MAM policies.




In order to use MAM policies with SfB Online, your SfB Online tenant must be enabled to support modern auth.


If the tenant is not enabled for modern authentication, MAM policies will not get applied to the SfB app on iOS and Android devices. As a result, an end user may see an error message like "Action Blocked: This action is blocked by your IT group." when he/she tries to open a calendar invite from managed Outlook app in order to join a Skype meeting.


How to enable Skype for Business Online tenant for modern authentication


Please follow these steps to enable SfB Online tenant for modern authentication:

    1. Connect to Skype for Business Online using remote PowerShell:


    1. Run the following command: Set-CsOAuthConfiguration -ClientAdalAuthOverride Allowed


    1. Verify that the change was successful by running the following: Get-CsOAuthConfiguration

Please refer to the following articles for more information and background:

Skype for Business Online: Enable your tenant for modern authentication

Connecting to Skype for Business Online by using Windows PowerShell

Get ready to configure mobile app management policies with Microsoft Intune

Hitakshi Nanavaty


Intune Customer Experience Team


Version history
Last update:
‎Oct 30 2018 04:09 PM
Updated by: