Skype for Business Exchange Integration problem after ADFS removal

%3CLINGO-SUB%20id%3D%22lingo-sub-170871%22%20slang%3D%22en-US%22%3ESkype%20for%20Business%20Exchange%20Integration%20problem%20after%20ADFS%20removal%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-170871%22%20slang%3D%22en-US%22%3E%3CP%3EA%20few%20days%20ago%2C%20I%20moved%20from%20a%20federated%20(ADFS%202.0)%20to%20managed%20domain%20in%20my%20hybrid%20Office%20365%20environment%20to%20take%20advantage%20of%20Password%20Sync%20via%20AAD%20Connect%20and%20ultimately%20Seamless%20SSO.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAfter%20the%20change%2C%20the%20office.com%20web%20portal%2C%20Outlook%20desktop%2C%20Skype%20for%20Business%20desktop%20and%20various%20other%20apps%20all%20successfully%20allow%20log%20in%2C%20so%20I%20thought%20I%20was%20in%20the%20clear.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E!!!%20The%20only%20thing%20that%20does%20not%20work%20is%20Skype%20for%20Business'%20Outlook%20Integration%20(i.e.%2C%20the%20ability%20for%20it%20to%20see%20your%20contacts%20listing).%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ES4B%20logs%20in%20and%20shows%20an%20error%20%22Skype%20for%20Business%20can't%20connect%20to%20Exchange.%22%20No%20contacts%20show.%20But%20it%20appears%20I%20can%20communicate%20with%20people%20just%20fine%2C%20so%20it's%20just%20the%20info%20it%20gets%20from%20Exchange.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAn%20additional%20Outlook%20Integration%20error%20in%20S4B%20shows%20%22The%20Exchange%20server%20won't%20let%20us%20connect.%20We're%20working%20on%20fixing%20the%20connection%20until%20it's%20fully%20restored.%20Your%20Outlook%20calendar%20and%20contact%20info%20might%20not%20be%20available%20until%20you're%20connected.%22%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWe%20connect%20to%20Skype%20for%20Business%20Online%2C%20no%20Skype%20server%20on-premises.%20Same%20for%20Exchange.%20Modern%20Authentication%20is%20turned%20on%20for%20Outlook%20and%20Skype%20as%20we%20use%20MFA.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESkype%20for%20Business%20shows%20no%20Internal%20or%20External%20EWS%20server%20under%20connection%20Configuration%20Info%2C%20so%20this%20makes%20me%20think%20it's%20something%20like%20autodiscover%20not%20finding%20the%20EWS%20server%2C%20but%20autodiscover%20seems%20to%20check%20out%20ok.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAlso%20just%20noticed%2C%20this%20hasn't%20been%20working%20on%20my%20PC%2C%20but%20works%20fine%20on%20my%20Mac.%20Some%20users%20are%20not%20experiencing%20the%20problem%20however%20this%20may%20be%20due%20to%20their%20S4B%20hasn't%20logged%20off%20and%20had%20to%20log%20in%20again%20following%20the%20ADFS%20removal.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESome%20other%20things%20I%20have%20tried%20with%20no%20success...%3CBR%20%2F%3E-%20signed%20out%20of%20S4B%20and%20deleted%20sign%20in%20info.%3CBR%20%2F%3E-%20cleared%20creds%20from%20Windows%20Credential%20Manager%3CBR%20%2F%3E-%20tried%20on%20a%20completely%20new%20computer%2C%20windows%20profile%3CBR%20%2F%3E-%20cleared%20S4B%20cache%20folder%3CBR%20%2F%3E-%20confirmed%20sip%20and%20smtp%20names%20for%20user%20match%3CBR%20%2F%3E-%20checked%20all%20autodiscover%20settings%20and%20required%20office%20365%20dns%20settings%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAt%20a%20loss%20here.%20Any%20insight%20would%20be%20appreciated.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-170871%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EHybrid%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESkype%20for%20Business%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-171095%22%20slang%3D%22en-US%22%3ERe%3A%20Skype%20for%20Business%20Exchange%20Integration%20problem%20after%20ADFS%20removal%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-171095%22%20slang%3D%22en-US%22%3EThank%20you%20for%20the%20input.%20I%20have%20tried%20Wireshark%20and%20did%20notice%20normal%20activity.%20I'll%20try%20some%20of%20your%20other%20suggestions.%20Currently%2C%20with%20Seamless%20SSO%20now%20turned%20off%2C%20it%20seems%20to%20be%20working%20as%20it%20should.%20I'll%20follow%20up%20with%20more%20info%20when%20I%20have%20it.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-171091%22%20slang%3D%22en-US%22%3ERe%3A%20Skype%20for%20Business%20Exchange%20Integration%20problem%20after%20ADFS%20removal%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-171091%22%20slang%3D%22en-US%22%3E%3CP%3ESo%20far%2C%20turning%20off%20Seamless%20SSO%20has%20solved%20this%20problem%20temporarily.%20I%20need%20to%20turn%20it%20back%20on%20later%20today%20and%20test%20some%20new%20ideas%20to%20see%20if%20I%20can%20get%20it%20working%20with%20sSSO%20on.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-170913%22%20slang%3D%22en-US%22%3ERe%3A%20Skype%20for%20Business%20Exchange%20Integration%20problem%20after%20ADFS%20removal%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-170913%22%20slang%3D%22en-US%22%3EDear%20David%2C%3CBR%20%2F%3E%3CBR%20%2F%3EMay%20be%2C%20Try%20looking%20into%20S4B%20client%20logs%20in%20Snooper%20and%20see%20if%20you%20can%20find%20any%20thing%20which%20can%20point%20you%20to%20right%20direction.%3CBR%20%2F%3E%3CBR%20%2F%3EApart%20from%20that%2C%20you%20also%20capture%20the%20traffic%20on%20Fidller%20and%20wireshark%20....%3CBR%20%2F%3E%3CBR%20%2F%3EThank%20You%2C%3CBR%20%2F%3ERahul%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

A few days ago, I moved from a federated (ADFS 2.0) to managed domain in my hybrid Office 365 environment to take advantage of Password Sync via AAD Connect and ultimately Seamless SSO.

 

After the change, the office.com web portal, Outlook desktop, Skype for Business desktop and various other apps all successfully allow log in, so I thought I was in the clear.

 

!!! The only thing that does not work is Skype for Business' Outlook Integration (i.e., the ability for it to see your contacts listing).

 

S4B logs in and shows an error "Skype for Business can't connect to Exchange." No contacts show. But it appears I can communicate with people just fine, so it's just the info it gets from Exchange.

 

An additional Outlook Integration error in S4B shows "The Exchange server won't let us connect. We're working on fixing the connection until it's fully restored. Your Outlook calendar and contact info might not be available until you're connected."

 

We connect to Skype for Business Online, no Skype server on-premises. Same for Exchange. Modern Authentication is turned on for Outlook and Skype as we use MFA.

 

Skype for Business shows no Internal or External EWS server under connection Configuration Info, so this makes me think it's something like autodiscover not finding the EWS server, but autodiscover seems to check out ok.

 

Also just noticed, this hasn't been working on my PC, but works fine on my Mac. Some users are not experiencing the problem however this may be due to their S4B hasn't logged off and had to log in again following the ADFS removal. 

 

Some other things I have tried with no success...
- signed out of S4B and deleted sign in info.
- cleared creds from Windows Credential Manager
- tried on a completely new computer, windows profile
- cleared S4B cache folder
- confirmed sip and smtp names for user match
- checked all autodiscover settings and required office 365 dns settings

 

At a loss here. Any insight would be appreciated.

3 Replies
Highlighted
Dear David,

May be, Try looking into S4B client logs in Snooper and see if you can find any thing which can point you to right direction.

Apart from that, you also capture the traffic on Fidller and wireshark ....

Thank You,
Rahul
Highlighted

So far, turning off Seamless SSO has solved this problem temporarily. I need to turn it back on later today and test some new ideas to see if I can get it working with sSSO on.

Highlighted
Thank you for the input. I have tried Wireshark and did notice normal activity. I'll try some of your other suggestions. Currently, with Seamless SSO now turned off, it seems to be working as it should. I'll follow up with more info when I have it.