Let’s take a look at a common sign on scenario for hybrid SfB. To understand what is needed for HMA to work, it’s helpful to understand the authentication flow. Overview of Authentication Flow with Skype for Business To learn more details on HMA, please take a pause and read Deep Dive: How Hybrid Authentication Really Works. This sets the foundation for you to leverage AAD security capabilities like two-factor authentication, or Intune Modern Application Management policies. Why would you want HMA? To enable SfB clients to obtain Access and Refresh Oauth tokens from AAD that SfB on-premises servers will accept and allow access. To use HMA with your SfB on-premises, you will need to have on-premises Active Directory federated with Azure Active Directory (AAD). Once all prerequisites have been met and all steps have been completed, your organization can target their Skype for Business DLP policies and provide another layer of security for your mobile users.Skype for Business Server (SfB) 20 cumulative update supports Hybrid Modern Authentication (HMA). To enable Hybrid Modern Auth, use the steps outlined in the following guide: If you target the Skype for Business app with App Protection policies and Modern Auth is not enabled, your App Protection policies will not apply successfully. Intune App Protection allows organizations to control Data Loss Prevention (DLP) settings for their Skype for Business users.
It also enables the Intune App Protection features for the Skype for Business iOS and Android apps.
Modern Authentication allows customers to enable many modern security features, such as Azure Active Directory Conditional Access or multi-factor authentication. In May 2017, a Skype for Business Server 2015 Cumulative Update was released, enabling "Hybrid Modern Authentication" for Hybrid and On-Premises Skype for Business customers. First published on TechNet on Jan 11, 2018
0 kommentar(er)
