Registration in SFB Online
Each
Trusted Application API SaaS endpoint must be registered against the Skype for
Business Online service. There are 2
registration steps for a Trusted Application:
1.
ISV/Developer
2.
End Customer (Tenant
Admin)
1.
For pre-release,
please send the following information to your Skype for Business TAP contact…
a.
Information from step
1 above: application id (aka client id), AppID uri (this will be used as audience when the Trusted Application API does a callback to the
application – add any AAD link for audience)
b.
A name to identity
your application within Skype for Business Online
2.
When a tenant like
Contoso.com wants to use your application, they have to do the following:
a.
Obtain tenant admin consent,
using application role permissions:
for
Business Online scope permissions A tenant admin must
explicitly grant consent to allow your application to access tenant data by
means of the Trusted Application APIs. The consent process is a
browser-based experience that requires the tenant admin to log into the Azure
AD consent UI and review the access permissions that your application is
requesting, and then grant or
deny
the request. For details, see Skype.
https://msdn.microsoft.com/en-us/office/office365/howto/building-service-apps-in-office-365
2.
Register the tenant
specific application endpoint with Skype for Business Online. Send the
following information to your contacts at SFB Online…
a.
Information from step
2.a above: application id (aka client id), AppID uri
b.
A name of your
application within Skype for Business Online
c.
Tenant ID
d.
Sip Uri that
identifies the tenant specific endpoint for the application. Requests sent to
this endpoint will trigger the Trusted
Application API sending an event to
the application, indicating that someone has sent a request.
e.
Callback uri for Trusted
Application API, to POST events to the
applications