...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
| Table of Contents |
|---|
The registration feature is used in order to restrict which types of devices/clients are filtered and which can or cannot sign in to Skype for Business.
We have 4 different device registration settings:
Self Registration
Automatic Registration
Admin Approval
Disabled
In order to get to the registration settings, we'll need to Sign in to the Access Portal admin area → Settings → Registration, or by using the following URL: /admin/settings?category=registration_settings
...
Users are given access to a self-service registration portal, where they can register their device themselves.(Image for example)
...
Multiple users per device - Setting to 'Yes' will allow multiple users to register with the same device.
...
The first set amount of devices for a specific user are automatically registered. From then onward, no other device is permitted to connect to the account unless admin provides approval.
...
Number of mobile devices to automatically register - Set the max amount of mobile devices which will be registered automatically. Any mobile device over the limit attempting registration will get rejected.
...
When users attempt to sign in their device will get rejected, Afterwards, the user must contact help desk service, which will manually approve their device via Access Portal.
...
Multiple users per device - Setting to 'Yes' will allow multiple users to register with the same device.
...
Require registration via VPN - see more in How to Set Up VPN Redirection?
Mac OS X Clients
We treat Mac OS X clients like PC clients.
This means that these clients have the limitations or permissions set by the admin for PCs applied to them too.
These clients are not eligible for registration using the SphereShield MDM Launcher app.
However, SphereShield Edge server settings do not apply to these devices, as they do not authenticate using the Edge server.
In environments using SphereShield credentials, these credentials must be used on the Mac OS X client.
Notifications
In order to enable this feature, you must first configure email notifications.
How to configure IM and E-Mail Notifications?
...
Admin Notifications
Rejected Devices Notification Frequency (days) - The frequency in days to send a report on blocked devices. Set to 0 to send a report on each blocked device.
...
User notification body for stuck in Expired - the E-mail body message of the notification mail.
User notification body for stuck in pre-auth – the E-mail body message of the notification mail.
Device type filtering table
...
For example, if we'll want to allow only iOS 11 devices to be able to sign-in, we'll edit the other device types and change it to Disabled. 
...
It is possible to add specific device types if they do not exist, by press the 
button.
The filtering is based on the Regular expression used, for example for the Skype Room System device type (UCCAPIMM/16.0.8315.3019 SkypeRoom/3.0.16.0), we'll make the following rule:
...
Registered Devices Table
In order to reach the registered devices table, please sign-in to the Admin area of the Access Portal → Registered devices, or by using the following URL: /admin/approveddevices
...
Here you can see a sortable list of all devices that have been registered, together with their user and who approved them.
Features:
View/search all registered devices
Unblock/Block/delete devices
Renew Sign in period
Export a list of devices.
Rejected Devices Table
In order to reach the registered devices table, please sign-in to the Admin area of the Access Portal → Rejected devices, or by using the following URL: /admin/rejecteddevices
...
You can see and manage blocked devices on this page. Only devices that attempted to sign in with correct credentials will appear here, in this page you can manually approve rejected devices.
...