-
Title
Users already configured in Skype for Business are not showing as enabled in Active Roles -
Description
The integration with Skype for Business in Active Roles 7.2.1 and higher versions uses a Policy and real-time communications rather than batch processing as in previous versions. If a user account is enabled in Skype for Business, there is no back-sync option necessary: they should show as enabled in the Active Roles Web Interface.
-
Cause
If a user is enabled in the Skype for Business console but not in the Active Roles Web Interface, this implies a communication issue between the Active Roles host and the Skype for Business host.
This could be related to port connectivity or certificate errors. Attempting to Skype-enable a User account may result in an error similar to the one below:
An error occurred during this operation. For details, see the error description below.'Skype for Business - User Management' policy encountered an error. Unable to connect to Skype for Business Server on skypeHost.server.domain. Details: Connecting to remote server skypeHost.server.domain failed with the following error message : The server certificate on the destination computer (skypeHost.server.domains:443) has the following errors: The SSL certificate contains a common name (CN) that does not match the hostname. -
Resolution
SOLUTION 1
The certificate securing the Skye Pool does not have a Subject Alternative Name containing the FQDN of the Skype host. Active Roles will use the FQDN of the host when connecting to a Skype resource, and the certificate must contain the FQDN of the Skype host. The certificate should be re-issued with the correct Subject Alternative Name.