Adding Skype for Business Meeting Icon to Outlook Online
Prerequisites:
- Locally stored version of the environment OAuth Certificate.
- Administrator rights
- Azure Active Directory Module for Microsoft Online
OAuth certificate:
- The CallTower OAuth certificate expires on 7/11/2020.
- When the OAuth certificate expires, a new certificate will need to be downloaded.
- The OAuth certificate can be downloaded from https://downloads.calltower.com/Downloads/LyncSetup/CT950OAuth.zip
Steps:
- Launch PowerShell as an administrator
- Connect to the MSOnline session
- Run the below PowerShell script in order. (The section in bold represents the physical path on the local machine where the downloaded OAuth certificate is located.)
Get-MsolServicePrincipal
$certificate = New-Object System.Security.Cryptography.X509Certificates.X509Certificate
$certificate.Import("C:\Temp\ct950oauth.cer")
$binaryValue = $certificate.GetRawCertData()
$credentialsValue = [System.Convert]::ToBase64String($binaryValue)
New-MsolServicePrincipalCredential -AppPrincipalId 00000004-0000-0ff1-ce00-000000000000 -Type Asymmetric -Usage Verify -Value $credentialsValue
Set-MSOLServicePrincipal -AppPrincipalID 00000002-0000-0ff1-ce00-000000000000 -AccountEnabled $true
$lyncSP = Get-MSOLServicePrincipal -AppPrincipalID 00000004-0000-0ff1-ce00-000000000000
$lyncSP.ServicePrincipalNames.Add("00000004-0000-0ff1-ce00-000000000000/s4b.ct950.com")
Set-MSOLServicePrincipal -AppPrincipalID 00000004-0000-0ff1-ce00-000000000000 -ServicePrincipalNames $lyncSP.ServicePrincipalNames
- Verify the script completed successfully by running the following command
Get-MsolServicePrincipal -AppPrincipalId 00000004-0000-0ff1-ce00-000000000000
5. Be sure that each user with a Skype for Business account has a SIP alias in Office 365
How to add a SIP Alias in Office 365 EAC
- Log into Office 365 using Admin Credentials at http://login.microsoftonline.com
- Under Admin click on Exchange on the left hand side
- Under recipients click on mailboxes
- Find the mailbox you would like to add an alias for and double click on it
- In the new window click the email addresses tab on the left
- Click the plus sign
- In the new window select the radio button for enter a custom address type
- Type in "SIP"
- In the Email Address Field type in the users email address which should match the Skype username and click OK at the bottom
- In the original screen at the bottom click Save
6. Submit case to support to have them add your domain to the CsOAuthServer list
Updating the OAuth certificate:
- Download a copy of the new OAuth certificate from the link above.
- Launch PowerShell as an administrator
- Connect to the MSOnline session
- Run the below PowerShell script in Order. (The section in bold represents the physical path on the local machine where the downloaded OAuth certificate is located.)
Get-MsolServicePrincipal
$certificate = New-Object System.Security.Cryptography.X509Certificates.X509Certificate
$certificate.Import("C:\Temp\ct950oauth.cer")
$binaryValue = $certificate.GetRawCertData()
$credentialsValue = [System.Convert]::ToBase64String($binaryValue)
New-MsolServicePrincipalCredential -AppPrincipalId 00000004-0000-0ff1-ce00-000000000000 -Type Asymmetric -Usage Verify -Value $credentialsValue
Set-MSOLServicePrincipal -AppPrincipalID 00000002-0000-0ff1-ce00-000000000000 -AccountEnabled $true