So it looks a bit like this, with EXO and SFBO in the Cloud with Azure AD, and Exchange Server (EXCH) and Skype for Business server (SFB) on-prem. The two options are:Īctive Directory Federation Server (ADFS) on-premises Skype for Business server (CU 5) on-premisesĪnother important part of MA is knowing where the authentication (authN) and authorization (authZ) of users will take place. There are potentially two server applications, and two Microsoft 365 or Office 365 workloads, involved with Skype for Business topologies used by MA. Given Skype for Business, Skype for Business online, Exchange Server, and Exchange online, what topologies are supported with MA? Supported MA topologies in Skype for Business That's a lot of moving parts, but the aim here is an easy to visualize list of supported topologies. This will also apply if you have a Skype for Business split-domain hybrid. Because Skype for Business works closely with Exchange, the login behavior Skype for Business client users will see will also be affected by the MA status of Exchange. Skype for Business can leverage security advantages of Modern Authentication. Modern Authentication in Skype for Business
This article lists what online and on-premises topologies are supported with Modern Authentication in Skype for Business, as well as security features that apply to each topology.