External User login for the first time:
2.
If SRV
Record is not created then It will use A record of Access Edge server
3.
By using the SRV Record or A record , client
will get Access Edge server IP over 443 port
4.
Here Edge server will reject request for 3 times
as it does not know request and it will ask authorize your self
5.
Client will provide Root CA to the edge server
6.
By looking at the Root CA Edge server will send
the request to the front End server
7.
FE doesn’t understand this request and it will
provide the certificate provisioning URL
8.
By using the URL client will download the Lync
certificate and will install on the local machine
9.
Once certificate installed on the local cert
store then user will get authentication pop-up
10.
After providing the credentials request will go
to FE and FE will check in SQL DB.
11.
If the user is enabled for Lync then will be
able to login
12.
After sign-in completed client will subscribe
for the presence and other details
13.
From the second time client will show the Lync
cert and client will be able login.
No comments:
Post a Comment