Skype for Business (formerly known as Lync) are enterprise instant messaging clients provided by Microsoft to be used with Microsoft Lync Server or Lync Online / Skype for Business Online available with Microsoft Office 365. Lync provides the infrastructure for enterprise instant messaging, presence, VoIP, ad hoc and structured conferences (audio, video and web conferencing) and PSTN connectivity through a third-party gateway or SIP trunk.

Skype for Business and Lync supports communications and instant messaging with external users, who are either Skype for Business user in another organization or domain, or personal Skype users and Windows Live Messenger users. This feature is commonly known as federation.

The support for external communications and public instant messenger connectivity has to be enabled in Skype for Business Admin Center. This tutorial shows you how to do just that. Note that this tutorial is geared towards Office 365 and Skype for Business Online or Lync Online, whereas on-premise Skype for Business Server or Lync Server will involves other additional steps to enable federation After enabling external communications, users in your organization can add Skype for Business or Skype users outside your organization to their list of Skype for Business contacts.

  1. Login to Office 365 admin center.
  2. On the left navigation pane, expand ADMIN tree, then click or tap on Skype for Business or Lync to open Skype for Business admin center or Lync admin center.

    Open Skype for Business Admin Center

  3. In Skype for Business / Lync admin center, go to Organization.
  4. Then go to External communications tab.
  5. Under the external access section, choose your preferred setting. The available settings are:
    • Off completely – if you choose this setting the public instant messaging connectivity with Skype is also unavailable.
    • On except for blocked domains – Recommended if you want to allow users to access and communicate with most people.
    • On only for allowed domains – Choose this if you want to allows users to communicate with users from approved organizations but block everyone else.
  6. Under public IM connectivity section, tick and enable the check box for Turn on communication with Skype users and users of other public IM service providers if you want to allow users to communicate with personal or private Skype users (or Windows Live Messenger users through integration with Skype).

    Enable Skype for Business / Lync Federation for External Communications

  7. Optional: Define your blocked or allowed domains if you wish. Note that you must define the allowed domains if you choose “On only for allowed domains”, otherwise users won’t be able to communicate with anybody from outside the organization.
  8. Click or tap on save button at the bottom of the page.
  9. The change takes effect immediately.
Note
The Skype for Business or Lync users you’re communicating with must also allow communication with your domain in order for the communication to be established.

In addition, only Skype for Business features that are enabled in both organizations are available when you’re communicating with someone in a federated domain.

If the external access setting is changed from “On only for allowed domain” to “On except for blocked domain”, the domains that are listed won’t be kept.

Not all functionality are available when communicating with Skype users (who also must sign in with a Microsoft Account or Windows Live ID).

Available with Skype usersNot available with Skype users
PresenceVideo conversations
Person-to-person instant messagingIM or audio conversations with three or more people
Person-to-person audio callsDesktop and program sharing
Find and add Skype for Business contacts in Skype
Important
For Lync or Skype for Business federation and external communications to work, two SRV records and two CNAME records need to be configured in the DNS for the domain as listed below.

Type: SRV
Service: _sip
Protocol: _tls
Port: 443
Weight: 1
Priority: 100
TTL: 1 Hour
NAME: @
Target: sipdir.online.lync.com

Type: SRV
Service: _sipfederationtls
Protocol: _tcp
Port: 5061
Weight: 1
Priority: 100
TTL: 1 Hour
NAME: @
Target: sipfed.online.lync.com

Type: CNAME
Host Name: sip
Target: sipdir.online.lync.com
TTL: 1 Hour

Type: CNAME
Host Name: lyncdiscover
Target: webdir.online.lync.com
TTL: 1 Hour