Skype Two Factor Authentication

TWO FACTOR AUTHENTICATION FOR SKYPE-FOR-BUSINESS

Protect Skype for Business access with two-factor authentication that verifies both the user’s password and their approved registered device.
SphereShield Two Factor Authentication
Two Factor Authentication

Secure Skype for Business access by matching the user and device

Organizations need two factor authentication for mobile access to Skype for Business to prevent unauthorized devices from connecting with corporate credentials.

SphereShield uses the password as something the user knows and the device as something the user has. Stolen credentials alone are not enough to connect without access to the registered device.

Registering the device adds an authentication factor and allows the organization to control which devices are allowed to connect.

Prevent workers from connecting unauthorized devices carrying corporate credentials.

Match each user to an approved device before allowing Skype for Business access.

Block hackers and unauthorized users even if they obtain Active Directory credentials.

Password Something the user knows

SphereShield verifies the registered device before Skype for Business access is allowed

Registered device Something the user has
Approved user and registered device Allow
Same credentials from a different device Block
Admin approval or portal registration required Control
Device registration options
Automatic registration
Two step registration
Admin manual approval
Why organizations need it

Organizations need to prevent workers from connecting unauthorized devices that carry corporate credentials. This helps ensure Skype for Business resources are not shared with family members, friends, or other unauthorized users.

By matching the device and user, the organization can limit users to corporate devices or specific devices that meet company security requirements.

Two factor authentication also prevents hackers and unauthorized users from connecting to Skype for Business servers with stolen Active Directory credentials.

Device as a second factor

The registered device becomes the second factor needed to connect.

User and device matching

Access is limited to the approved user connecting from an approved device.

Unauthorized device blocking

Attempts from a different device using the same credentials are automatically blocked.

Registration approaches

Flexible enrollment through the SphereShield Access Portal

Automatic registration

The device is registered when the user connects to Skype for Business for the first time. Future connections are verified against the registered device.

Two step registration

Users register through a dedicated portal from the internal network and then connect from the device within a limited time window.

Multiple device support

SphereShield can support multiple devices and can also limit the number of approved devices per user.

Admin manual approval

New devices can be registered into a blocked list first and then approved manually by the SphereShield administrator.

Highlights

Prevent connecting unauthorized devices that carry corporate credentials.

Match the device and user before allowing access.

Provide two step strong verification.

Avoid connection by hackers or unauthorized users with stolen credentials.

Even if an attacker has the user's password, the registered device is still required before Skype for Business access is granted.

Secure Your Collaboration Environment

Protect Microsoft 365, Webex, Teams, OneDrive, SharePoint,
and Skype for Business with SphereShield’s policy-driven security, compliance, and governance controls.

Create your account