question

DevendraAndhalkar-0081 avatar image
0 Votes"
DevendraAndhalkar-0081 asked TristanColo-8705 edited

Skype for Business MFA using External IDP

Hi Team,

I saw Skype for business app/mobile app can be configured for MFA using Modern authentication . I read on Microsoft documentation MFA can be done using Azure AD and ADFS. Is it possible to configure it using any external IDP or federation server sitting on premise without using Azure AD(Cloud). We have vendors like Ping, IBM which supports federation server+MFA capability


I request you to please provide any input you have on this type of integration.


Thanks


Regards,

Devendra

adfsoffice-skype-business-server-administrationazure-ad-librariesoffice-skype-business-server-sign-inazure-ad-adal-deprecation
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

JimmyYang-MSFT avatar image
0 Votes"
JimmyYang-MSFT answered TristanColo-8705 edited

Hi @DevendraAndhalkar-0081.

Based on my research, Microsoft do not provide the document about using external IDP to configure Skype for Business MFA. But it seems there is some way to set up multi-factor authentication (MFA) for Microsoft Office 365 with AuthPoint as an identity provider. For more details, you can refer to:

https://www.virtualsecurity.nl/office-365-integration-with-authpoint

Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.




If the response is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @JimmyYang-MSFT , thanks for your reply. I am looking for On premise solution which can be integrated as external idp for MFA with on premise Skype for Business. There is no chance of cloud based solution or cloud IDP. I am not sure if Skype for Business MFA using modern authentication is by default go to Auzre AD. Is the S4B tightly coupleed to use Azure AD?

0 Votes 0 ·
JimmyYang-MSFT avatar image JimmyYang-MSFT DevendraAndhalkar-0081 ·

Hi @DevendraAndhalkar-0081

Microsoft recommends you use Azure AD to complete SFB MFA.

0 Votes 0 ·

Hi @DevendraAndhalkar-0081

Do you have any further issue on this topic?

0 Votes 0 ·
TristanColo-8705 avatar image TristanColo-8705 DevendraAndhalkar-0081 ·

For on Premises Modern Authentication you have to use this:
https://docs.microsoft.com/en-us/microsoft-365/enterprise/configure-skype-for-business-for-hybrid-modern-authentication?view=o365-worldwide

AuthPoint's solution for Skype for Business is only for Microsoft Cloud MFA... and Skype for Business cloud was EoL as of this July


0 Votes 0 ·