client
41 TopicsSFB online Client Sign in and Authentication Deep Dive ;Part 1
First published on TECHNET on Apr 09, 2018 Scenario: Pure Online (O365) environment, SFB user is homed Online, NO ADFS, MA (Modern Auth) is Disabled in O365NOTE:I have tried my best to ensure the information below is accurate.26KViews6likes2CommentsHow to reset Skype Room Systems v2 after upgrade to Windows 10 Creators Update Version 1703
Download and run the Skype Room Systems v2 reset script for Surface Pro 4 to address issues and notifications occurring after upgrade to Windows 10 Creators Update (Version 1703). NOTE: See March 30th, 2018 blog article to address issues when devices upgraded to Windows 10 Version 1709.23KViews3likes20CommentsModern Authentication for the Skype for Business Online Windows PowerShell Module
Modern Authentication is an authentication mechanism replacing NTLM or Kerberos and allows to enable scenarios like multi-factor authentication. In the past, you couldn’t leverage Modern Authentication if you wanted to connect as an administrator via remote PowerShell to manage Skype for Business Online. This meant that you had to use an administrator account that did not enforce Modern Authentication. For administrators to benefit from the additional security that Modern Authentication provides, we updated the Skype for Business Online Windows PowerShell Module. Note: You must have version 7.0.1045.0 or higher (link is at the end of this article). In addition, to use multi-factor authentication, you can no longer provide a PSCredential object to New-CsOnlineSession. New-CsOnlineSession will prompt for credentials without a PSCredential object, so you will always get a pop-up to provide your credentials. The credentials can be used for up to 8 hours, then you must re-authenticate after 8 hours. Examples of how to use the new connector with a modern authentication enabled tenant: New-CsOnlineSession user@domain.com Prompts credentials of the specified user, using multi-factor authentication enabled for that user. New-CsOnlineSession Prompts for admin UPN, then prompt for credentials for that user, using multi-factor authentication if enabled. New-CsOnlineSession <PSCredential> Not valid if multi-factor authentication is enabled for the user. Included so that existing scripts for admins using username and password only, will continue to work. Deployment considerations There are a few known issues we want to point out: Session expiration: Sessions expire after 8 hours. When they do, a pop-up asks you for credentials, but this but this pop-up will not accept any credential you can provide (as it is expecting an OAuth token). A way how to remove the existing session is: $SkypeSession = Get-PSSession Remove-PSSession $SkypeSession It is also important to keep the session expiration in mind if you plan to run scripts that might run longer than 8 hours. Installation on unpatched Windows Server 2012 R2: Installation of the Skype for Business Online Windows PowerShell Module might fail if you are running it on an unpatched Windows Server 2012 R2. The reason is that it is using an incompatible version of vcredist. We always recommend to keep all systems fully patched, this will also resolve this issue. Managing Cloud Connector Edition: A tenant global administrator account is required for Cloud Connector, to add or remove appliances, enable or disable automatic OS updates, and enable or disable automatic binary updates. While this account can be enabled for Modern Authentication it must not be enabled for multi-factor authentication - otherwise managing Cloud Connector Edition will fail. Call to action: Learn more about Modern Authentication our wiki: Skype for Business Online: Enable your tenant for modern authentication. Download the latest Skype for Business Online Windows PowerShell Module. Enable your tenant and the administrators for remote PowerShell. Questions or comments? Discuss with us in the SOF Community.21KViews7likes1CommentWhat's new for Auto Attendants and Call Queues in July 2017?
Call Queue and Auto Attandant calls are now supported on Mac and Mobile endpoints! A user can be setup to make calls on behalf of a Call Queue or Auto Attendant, and support for 0365 Groups and enhancements in Speech Recognition and Text to Speech are now rolled out for Auto Attendants.10KViews6likes22Comments