To find your Oauth cert run the Skype for Business or Lync Server 2013 Deployment wizard.
Choose Install or Update Skype for Business Server
Request, Install, Assign Certs
In the pop up choose the OAuthTokenIssuer and the View
You can then see the cert details by click View Certificate Details in the Next pop up.
It should look like below but with your specific Cert Info.
Once you are viewing the certificates please go under details and get the serial number in case you have multiple certs.
Alternatively, you can find your OAuthwith the following:
Get-CsCertificate -Type OAuthTokenIssuer
Next we will export OAuth cert.
Open up an MMC and chose
File > Add/Remove Snap-in
In the pop up you will Choose
in the left pane, then click
in the pop up choose
From Here we need to Open
Personal > Certificates
to find the correct cert. You remembered to get the serial number didn’t you? Open the cert and click on
and verify the correct cert to export.
Do not export the private key when asked.
Der encoded one is the one we want to export.
Save the export to some place handy.
Importing Modules and Session Connection
NOTE: Please see the Script Center for a
that contains most of these script examples
Open up Windows PowerShell and Run as Administrator and import the following:
For getting the session connected we will need creds.
You know this is correct when you see the Realm match your TenantID
Creating a new Partner Application
We will be creating a partner application to Exchange Online for Skype for Business to exchange security tokens, without having to exchange those tokens by using a 3
party token server (i.e. Exchange and Skype for business will trust each other.)
New-CsPartnerApplication -Identity Microsoft.exchange -ApplicationIdentifier 00000002-0000-0ff1-ce00-000000000000 -ApplicationTrustLevel Full –UseOauthServer
Up to now we have found and exported our On Prem OAuth Cert, Created the OAuth Server On Prem, and the Partner Application on prem. The next step is to connect online and provide the cert to the Online services and connect them.
The two services we are going to allow to talk to each other
These are the Lync/Skype and the Exchange Service principles we need talking to each other to get this working.