enable modern authentication for skype online hybrid

I will use the following post from Microsoft to configure it. Updated list of SfB MA Supported Topologies is here: Skype for Business topologies supported with Modern AuthenticationĪlso, two of my colleagues have published their own excellent blogs on this topic. Hybrid Modern Authentication (HMA) is a method of identity management that offers more secure user authentication and authorization, and is available for Exchange server on-premises hybrid deployments. The prerequisites and instructions to enable HMA can be found here: The steps can be boiled down to the following: Tell AAD about onprem webservice urls. Download free Microsoft Outlook email and calendar, plus Office Online apps.

Follow the steps in the 'Turn on Hybrid Modern Authentication for Skype for Business on-premises' section of this article. The sequence is that Outlook displays the modern authentication screen for. This design requires you to use Azure Active Directory as the authorization server for your onprem SfB and onprem Exchange deployments ( note the blue arrow from SfB onprem and Exchange onprem to AUTH in the cloud). It turns out doing this step hooks up some plumbing to allow you to do step 4. This will enable customers to use Modern Auth enabled security features such as Multi Factor Authentication (MFA), Cert Based Authentication (CBA), AAD Conditional Access (CA) and Intune Mobile Application Management (MAM) for all their users, both those homed online as well as those homed onprem. When you enable modern authentication in Skype for Business, the Skype for Business client uses modern authentication to log in to Skype for Business Online. This is a major milestone in our Modern Authentication journey. Today, I am very happy to announce General Availability (GA) for Hybrid Modern Authentication (HMA) for Skype for Business and Exchange.

Enable modern authentication for skype online hybrid