SKYPE AD CREDENTIAL PROTECTION

Use dedicated Skype for Business credentials to keep Active Directory passwords off mobile devices while allowing secure external access through the self-service portal.
Dedicated Skype for Business Credentials
Dedicated Skype for Business credentials

Protect Active Directory credentials by keeping them off mobile devices

Authentication can use the user's Active Directory credentials or dedicated Skype for Business credentials created through the access portal.

Dedicated Skype for Business credentials improve security because Active Directory credentials are not stored on the mobile device.

This approach is also useful for organizations that use smart cards for network access and want safer external mobile connectivity.

Avoid using or storing Active Directory credentials on smartphones.

Safely connect from external and public networks without exposing core credentials.

Reduce damage if dedicated Skype for Business credentials are stolen.

Access portal Create dedicated credentials

SphereShield separates mobile Skype access from Active Directory credentials

Skype for Business External mobile access
Dedicated Skype credentials entered on device Use
Active Directory credentials stored on mobile Avoid
Device registered within limited time window TFA
Credential creation flow
Log into access portal
Create Skype credentials
Register device for TFA
Why it matters

Many organizations are concerned that employee smartphones may end up in the wrong hands due to loss or theft.

Mobile devices often connect through unmanaged networks and public Wi-Fi, increasing the risk that Active Directory credentials could be exposed.

With SphereShield, users can connect from external networks using a dedicated username and password that only works for Skype for Business.

If these credentials are stolen, further damage is limited because they are separated from the user's Active Directory credentials.

Mobile credential separation

Keep Active Directory credentials away from smartphones and external mobile access.

Safer public network access

Allow users to connect from external networks without exposing core AD credentials.

Reduced credential damage

Dedicated Skype credentials limit what an attacker can do if credentials are stolen.

Creating dedicated credentials

Simple access portal flow for safer Skype for Business login

Users log into the self-service access portal to create dedicated Skype for Business credentials.

The portal can also support smart card login policies, similar to access from a network desktop computer.

Once users create credentials that differ from their Active Directory credentials, they can connect their device within a limited time window, with a default of 15 minutes, to register the device for two factor authentication.

After that, users enter only the Skype for Business credentials on the device and do not need to provide their Active Directory credentials again.

This provides an ADFS-like approach with fewer prerequisites while keeping mobile authentication safer and simpler.

Highlights

High security level for external Skype for Business access.

Active Directory credentials are not stored on the mobile device.

Safely connect from external networks.

Dedicated username and password for Skype for Business.

Avoid using Active Directory credentials on mobile devices.

Supports self-service access portal credential creation.

Secure Your Collaboration Environment

Protect Microsoft 365, Webex, Teams, OneDrive, SharePoint,
and Skype for Business with SphereShield’s policy-driven security, compliance, and governance controls.

Create your account