For details on authentication, see Authentication Using Azure AD.

If authentication and authorization are successful, Azure AD returns a token and grants access to Skype for Business Online and identifies the current signed-in user. After consent is granted, the UI redirects the user back to your application. The user reads the descriptions of the access permissions that your application is requesting, and then grants or denies the request. A user must explicitly grant consent to allow your application to access user data by means of the Skype Web SDK APIs. Azure AD validates the request and responds with a sign-in page, where the user signs in. When a user visits your website and initiates sign-in, your application makes a request to the Microsoft common OAuth2 login endpoint. For details, see Registering your application in Azure AD.Īdd a sign in feature to your app. This will allow you to establish an identity for your application and specify the permission levels it needs in order to access the APIs. To allow your application access to the Skype Web SDK APIs, you need to register your application in Azure AD.

Following is a brief overview of the steps required, with further details on each step below: Skype for Business Online uses Azure Active Directory (Azure AD) to provide authentication services that your application can use to obtain rights to access the service APIs. This topic does not apply to on-premises or hybrid server scenarios only to online scenarios.

Skype for business web