Configure Skype for Business

Skype for Business must now be configured in the Conferencing tab of the EMS Platform Services Admin Portal.

This topic provides information on the following:

ClosedSupported Skype Products

ClosedPrerequisites

Skype for Business Server 2015 (On-premise) Integration

The following prerequisites are required for the Skype for Business Server 2015 (on-premise) integration:

  1. Ensure a SHA2 and above Algorithm certificate is installed and functional. SHA2 is required as major browsers no longer support SHA1.

  2. To provide a URL, navigate to the Platform Services Admin Page Conferencing tab. If a URL is not provided, EMS will build a URL based on the Everyday User's email address.

    Optionally, you can provide one or more URLs. Multiple URLs must be separated by commas and contain no spaces.

    Ensure you can access the URL without certificate errors (EMS Software recommends using the Google Chrome browser). AutoDiscover URL should return an xml file. If you experience certificate errors, please refer to the first step above.

  3. Ensure all EMS components have been deployed:

    1. EMS Platform Services

    2. EMS Web App (optional)

    3. EMS Mobile App (optional)

    4. EMS Desktop Client

    5. Integration to Microsoft Exchange

Skype for Business Online Integration

The following prerequisites are required for the Skype for Business online integration:

  1. Ensure Microsoft Azure Active Directory is installed and functional.

  2. Ensure you have admin access to Azure environment.

  3. Provide EMS Conferencing URI (e.g., https://servernamefqdn/web app directory/ConferencingLogin.aspx). This URI must be verifiable and accessible externally.

  4. Ensure all EMS components have been deployed:

    1. EMS Platform Services

    2. EMS Web App (optional)

    3. EMS Mobile App (optional)

    4. EMS Desktop Client

    5. Integration to Microsoft Exchange

ClosedDeployment Types

There are three deployment types for Skype for Business:

  1. Skype for Business Server 2015 On Premise – This deployment for Skype for Business does not retain a token and requires authentication every 8 hours. As a result, you will be asked to sign in every 8 hours. Please follow the instructions in Prerequisites for Skype for Business Server 2015 (On-premise) Integration and Integrate Skype for Business Server for configuration.

  2. Skype for Business Online – This deployment retains the token so only an initial authentication is required. Please follow the instructions in Prerequisites for Skype for Business Online Integration and Integrate with Skype for Business Online for configuration.

  3. Hybrid – This deployment has the same authentication method as the Online deployment. Please follow the instructions in Prerequisites for Skype for Business Online Integration and Integrate with Skype for Business Online for configuration.

EMS Software uses Unified Communications Web API 2.0 to integrate with Skype for Business Server and Skype for Business Online.

Skype for Business Authentication and Authorization Sequence Diagram

Ensure that you have Exchange Integration Web Services component deployed in your environment. 

ClosedIntegrate with Skype for Business Server

As of Update 24, the Skype for Business parameters have moved from EMS Desktop Client to EMS Platform Services. If you have installed Update 24 or higher, you will need to configure Skype for Business parameters in the Conferencing tab of EMS Platform Services Admin Portal.

To ensure that your Skype for Business invitation contains all required information, the Max Length for Text Fields parameter in EMS Desktop Client must be set to '0' (unlimited).

Conferencing Tab of EMS Platform Services Admin Portal

To configure Skype for Business in the EMS Platform Services Admin Portal:

  1. Navigate to the Conferencing tab.

  2. Provide a Client Name in the Azure Active Directory Client ID field. This determines the ID of the registered application.

  3. Provide the Azure Active Directory Tenant. This determines the name of the AAD tenant.

  4. Provide the Skype for Business AutoDiscover URL. This performs autodiscovery to find the appropriate server to communicate with. Multiple URLs must be separated by commas and cannot contain any spaces. The client machine and the Web server should have access to the Autodiscover URL.

  5. Choose a Skype for Business Server Authentication Method from the field. This determines the authentication type that is used to generate a token. You can choose from the following authentication methods:

    • NTLM

    • ADFS – The EMS Mobile App does not support ADFS authentication.

    • Username/Password

    • Oauth (Online) – This is the only authentication option for Skype for Business Online Integration.

  6. Click Save Changes.

  7. From the Everyday User Applications parameters tab, select the Platform Services API URL parameter and click Edit to specify the Platform Services URL.

  8. Add EMS Applications to the Allowed Domains List. Unified Communications Web API (UCWA) uses xframe and cross-domain scripting to accomplish the user authentication to leverage the integration. Therefore, EMS applications must be added to a whitelist within the Skype for Business implementation. The whitelist needs to be updated on each of the servers that a user could leverage. For more information, please see here.

    • At a minimum, customers will need to whitelist the EMS Web App and EMS Mobile App conferencing URL (trailing forward slash is required). Please see examples below:

      • EMS Web App: https://servername.domain/EMSWebApplicationName/ConferencingLogin.aspx

        • Any combination of this URL will need to be whitelisted (e.g., if there is a different URL for Internal versus External or Mobile Web Access).

      • EMS Mobile App:
        emssoftware://skype/x

        • If the customer re-Packages the EMS Mobile App, the same URL should be used.

    • Optionally, whitelisting the EMS Web server will facilitate both test and prod environments without adding multiple single entries. Please consult your organization's IT department and provide them with the following steps.

      When testing the Skype for Business Integration, you must use a whitelisted FULLY QUALIFIED DOMAIN. Most browsers will throw a cross domain error unless the server name is whitelisted without FDQN.

      For example: http://xxxx.servername.com/emswebapp is different than http://xxxx/emswebapp
      or https://xxxxx.servername.com/emswebapp

  9. Configure trusted Skype certificates. The client devices and EMS Servers need to be able to trust the certificates that are installed on the Skype servers within the Skype implementation. Customers can use private certificates that the Web server has been configured to trust.

ClosedIntegrate with Skype for Business Online

To integrate with Skype for Business Online:

  1. Create a Skype for Business App in Azure AD:

    1. Sign into the Azure Management portal.

    2. Set the Azure Active Directory.

    3. Select App registration.

    4. Click New Registration.

    5. Enter the required information, including:

      1. In the Name field, enter the name of your application (e.g., EMS SFB).

      2. In the Application type field, select Accounts in this organizational directory only.

      3. In the Redirect URI field, select Web and enter the Conferencing URI (make sure to include the trailing slash).

      4. Click Register.

  2. Modify the Skype for Business App permissions as follows:

    1. On the API Permissions page, click Add a Permission.

    2. From the App Registrations, select the Skype for Business App.

    3. Click Delegated Permissions.

    4. Select all permissions for Skype for Business online.

    5. Add permissions and confirm consent.

  3. Verify/Select Microsoft Graph and choose Sign in and read user profile.

  4. Grant Admin Consent for <Client Name>

    From this Skype for Business application, users can add multiple URI (e.g., for testing or production URI) without creating separate Skype for Business apps for each environment.
  5. Note the Application (client) ID located in the Overview.

    This will need to be added to EMS Platform Services Conferencing configuration.

ClosedConnect EMS Web App to Platform Services

To integrate with Skype for Business, EMS Web App must connect to EMS Platform Services.

To connect EMS Web App to Platform Services:

  1. Navigate to the EMS Platform Services Admin Portal. 

  2. Select Integrations. Under Clients, click on the EMS Web App link.

  3. Click the Reset Secret button and copy the generated Secret.

  4. In the web.config file located in the designated folder for your current version of EMS, insert the copied Secret ID into the value field. 

        <add key="platformServicesSecret" value="YourSecretID" />
    Important!

    EMS Cloud Services customers do not need to generate a Secret or insert it into the web.config file (Steps 3 and 4).

  5. Clear the cache in EMS Platform Services

  6. In the EMS Desktop Client, navigate to System AdministrationSettings Parameters Everyday User Applications. Configure the Platform Services API URL parameter and then click Close.

ClosedConfigure Skype for Business on Global Templates

As of Update 24, the Skype for Business parameters have moved from EMS Desktop Client to EMS Platform Services. If you have installed Update 24 or higher, you will need to configure Skype for Business parameters in the Conferencing tab of EMS Platform Services Admin Portal.

To configure Skype for Business on global templates:

  1. Configure Skype for Business in the EMS Platform Services Admin Portal.

  2. Navigate to System Administration > Settings > Parameters > Everyday User Applications tab. 

    1. From the Area dropdown, choose System.

    2. Select Platform Services URL. Click Edit.

    3. Enter the URL for Platform Services. For example: https://serverURL/{PlatformServicesName}.

    4. Click OK.

    5. Click Close

  3. Navigate to System Administration > Settings > Parameters > Everyday User Applications tab.

    1. From the Area dropdown, choose Skype for Business.

    2. Select Enable Skype for Business. Click Edit.

    3. The default value is No. Set the Description to Yes.

    4. Click OK.

    5. Click Close

  4. In the Everyday User Application Settings, check the Enable Integration to Microsoft Exchange box.

ClosedConfigure Skype for Business on a Process Template Level

Changing the parameters on a template level will override the global settings.

Clear the cache in EMS Platform Services and EMS Web App whenever parameter changes are made. 

To configure Skype for Business on a process template level:

  1. In the EMS Desktop Client, navigate to Configuration > Everyday User Applications > Everyday User Process Templates.

  2. Click New. The template dialog box appears.

    To edit an existing template, see Configure Skype for Business on Existing Templates.

  3. In the Everyday User Application Settings section of the Process Templates tab, check the Enable Integration to Microsoft Exchange box. 

  4. Navigate to the Parameters tab.

  5. Filter the parameters by typing "Skype" in the Filter field.

  6. Click on the Enable Skype for Business parameter and click Edit.

    The Edit Parameter dialog box appears.

    1. The default value is No. Select Yes from the Enable Skype for Business field.

    2. Click OK on the Edit Parameter dialog box. 

  7. Click OK on the Everyday User Process Template box.

  8. Click Close

ClosedConfigure Skype for Business on Existing Process Templates

Clear the cache in EMS Platform Services and the EMS Web App whenever parameter changes are made.

To configure Skype for Business in existing templates:

  1. In the EMS Desktop Client, navigate to Configuration > Everyday User Applications > Everyday User Process Templates.

  2. Click on the existing template for which you want to enable Skype for Business.

  3. Click Edit. The template dialog box appears. 

  4. Ensure that the Enable Integration to Microsoft Exchange box is checked in the Everyday User Application Settings section of the Process Templates tab. 

  5. Navigate to the Parameters tab.

  6. Filter the parameters by typing "Skype" in the Filter field. 

  7. Click on the Enable Skype for Business parameter and click Edit. The Edit Parameter dialog box appears.

    1. The default value is No. Select Yes from the Enable Skype for Business dropdown.

    2. Click OK on the Edit Parameter dialog box. 

  8. Click OK on the Everyday User Process Template box.

  9. Click Close

Once a Skype meeting is added to a reservation, a Skype meeting flag, which indicates that the reservation has a Skype meeting, appears in the Booking Summary tab for the reservation in the EMS Desktop Client. Additionally, the Skype ID will appear in the Properties tab for the reservation. A reservation-level display field named Skype Meeting in the Query Builder will indicate there is a Skype meeting in the reservation.