Cisco Expressway - Office 365 Skype for Business Federation Configuration


Expressway Configuration

At a high level, the following standard Expressway configuration is required. For more detailed steps refer to the Expressway configuration guides

  • Traversal zone between the Expressway-C and the Expressway-E
  • Search rule on the Expressway-E directing the inbound calls to the target domain to the Expressway-C via the Traversal zone
  • Neighbour zone on the Expressway-C to the CMS Call Bridge
  • Search rule on the Expressway-C directing the inbound calls to the target domain to the CMS Neighbour zone for Microsoft SIP calls (Microsoft Variants)
  • External SRV record for Federation noted in the table below

External DNS record:

Type Example Port Target
SRV _sipfederationtls._tcp.domain.com 5061 expressway-e.domain.com

Office 365 - Skype for Business Configuration

From the Office 365 Admin Center, the Federation settings can be changed in two locations.

Steps for location one

  • Click Settings > Services & add-ins from the left navigation
  • On the Services & add-ins screen, click Skype for Business
  • The default permits Federation with all domains
  • Alternatively, selectively allow Federation by selecting All domains are blocked except and adding the desired domain/s into the list

Steps for location two

  • Admin centers > Skype for Business from the left navigation
  • Click on the Organization object from the left navigation
  • Click on the external communication top navigation
  • By default, it is set to On except for blocked domains, essentially open Federation
  • Similar to above, this could be changed to On only for allowed domains