SKYPE AD CREDENTIAL PROTECTION
Protect Active Directory credentials by keeping them off mobile devices
Authentication can use the user's Active Directory credentials or dedicated Skype for Business credentials created through the access portal.
Dedicated Skype for Business credentials improve security because Active Directory credentials are not stored on the mobile device.
This approach is also useful for organizations that use smart cards for network access and want safer external mobile connectivity.
Avoid using or storing Active Directory credentials on smartphones.
Safely connect from external and public networks without exposing core credentials.
Reduce damage if dedicated Skype for Business credentials are stolen.
SphereShield separates mobile Skype access from Active Directory credentials
Many organizations are concerned that employee smartphones may end up in the wrong hands due to loss or theft.
Mobile devices often connect through unmanaged networks and public Wi-Fi, increasing the risk that Active Directory credentials could be exposed.
With SphereShield, users can connect from external networks using a dedicated username and password that only works for Skype for Business.
If these credentials are stolen, further damage is limited because they are separated from the user's Active Directory credentials.
Mobile credential separation
Keep Active Directory credentials away from smartphones and external mobile access.
Safer public network access
Allow users to connect from external networks without exposing core AD credentials.
Reduced credential damage
Dedicated Skype credentials limit what an attacker can do if credentials are stolen.
Simple access portal flow for safer Skype for Business login
Users log into the self-service access portal to create dedicated Skype for Business credentials.
The portal can also support smart card login policies, similar to access from a network desktop computer.
Once users create credentials that differ from their Active Directory credentials, they can connect their device within a limited time window, with a default of 15 minutes, to register the device for two factor authentication.
After that, users enter only the Skype for Business credentials on the device and do not need to provide their Active Directory credentials again.
This provides an ADFS-like approach with fewer prerequisites while keeping mobile authentication safer and simpler.
High security level for external Skype for Business access.
Active Directory credentials are not stored on the mobile device.
Safely connect from external networks.
Dedicated username and password for Skype for Business.
Avoid using Active Directory credentials on mobile devices.
Supports self-service access portal credential creation.
Secure Your Collaboration Environment
Protect Microsoft 365, Webex, Teams, OneDrive, SharePoint, and Skype for Business with SphereShield’s policy-driven security, compliance, and governance controls.