Hello,
i want to understand the impact of enabling modern authentication for Exchange Online and Skype for Business Online in the following scenario:
Skype for Business On Premises Environment with 1 S4B 2015 Site (Main Site) and 1 Lync 2013 Site
Skype for Business Hybrid PSTN configured with Office365
Exchange On Premises 2013 with existing Hybrid setup with Office 365
Polycom Trio and VVX devices
No MFA for users
Modern Authentication only activated for Sharepoint Online, not for Exchange Online and Skype for Business Online
Office 2016 Click2Run for all Clients
ADFS 3.0 is in use with no special claims
Intune should be used for conditional access
User combinations:
S4B User On Premises with mailbox in Exchange Online
S4B User On Premises with mailbox in Exchange On Premises
S4B User in Office 365 with mailbox in Exchange Online
S4B User in Office 365 with mailbox in Exchange On Premises
What we want:
We only want to enable modern authentication for Exchange Online and Skype for Business Online. The documentation from Microsoft is somewhat confusing. Some articles state that we would have to enable modern authentication for the S4B on premises environment too. So basically the qiuestion is can we activate modern authentication for Exchange Online and Skype for Business Online and leave it off for the S4B Hybrid / Exchange Hybrid On Premises environment?
I have attached a picture which undermines my assumption that it should be possible to turn Modern Authentication On for EXO and S4B Online and leave it off for the on premises components even if they are hybrid.
