Mar 19 2017 04:51 AM
We are using Office 365, but are trying to setup federation with partners who have on prem installations.
Does anyone with an OnPrem installation have a checklist of steps to take to enable a new organziation using Skype Online?
Every time we do it it seems to be a trial and error process for them and since we don't have an onprem setup there is little that we can do to help.
Thanks in advance.
Mar 19 2017 05:23 AM
Do they have the edge setup correctly and working?
https://technet.microsoft.com/en-us/library/dn933903.aspx
They can test with https://www.eventzero.com/Tools/FederationTester/
Mar 19 2017 05:34 AM
Mar 19 2017 05:39 AM
External DNS Records correct?
Do the Lync/Skype here https://testconnectivity.microsoft.com pass for both sides?
Mar 19 2017 05:55 AM
Mar 19 2017 06:17 AM
See the Let’s Federate! section on https://www.petri.com/setup-lync-federation
It's for Lync, but steps are pretty much the same for SfBS I believe.
Mar 21 2017 10:19 AM
An issue I see a lot is when the on premises installation on the partner side is using an allow list for federated domains that includes the fqdn of your access edge server. That will stop working when you move to Office 365. Removing the the edge server fqdn from the allow list entry should fix that.
Mar 23 2017 01:11 PM - edited Mar 23 2017 01:13 PM
Mar 31 2017 03:00 AM
Hi Dan.
It is not really an easy question to answer, as it depends on what setting your partner has.
Open federation with DNS SRV routing and hosting partner federation:
It works out of the box.
Open federation with DNS SRV routing and no hosting partner federation:
Your partner must add #SFBO as a hosting provider.
New-CsHostingProvider -Identity SkypeforBusinessOnline -ProxyFqdn "sipfed.online.lync.com" -VerificationLevel UseSourceVerification -Enabled $True -EnabledSharedAddressSpace $False -HostsOCSUsers $False -IsLocal $False
Closed federation with DNS SRV routing and hosting partner federation:
Your domain must be added to the federated allow-list:
New-CsAllowedDomain -Identity "fabrikam.com"
Closed federation without DNS SRV routing and hosting partner federation:
New-CsAllowedDomain -Identity "fabrikam.com" -ProxyFqdn "proxyserver.fabrikam.com"
I think you get the idea from here.
/Kenneth ML