We are receiving the following error in the Windows event log when trying to communicate using Lync between two domains (all users in each domain) which are set up to be federated:
Domain A --> Domain B: To User not authorized for Federation
Domain B --> Domain A: From URI not authorized to communicate with federated partners
I can post more complete error messages if needed, but I figured this would be a start.
Background:
We currently have a couple licenses for Office 365 to test out hosted Exchange (a hybrid configuration which is set up and seems to be working) and Lync, along with the other products.
We recently set up a trial domain to simulate a partner company to see how easy it would be to federate with Exchange and Lync. Exchange information (free/busy) seems to pass back and forth between our domain and the partnet domain correctly. Lync federation, however, does not seem to work. We have the following setup:
1. Both Lync online domains have the domain federation mode set to "Turned on for all domains except blocked domains." I have also tried setting it to "Turn off external communications with all except allowed domains" and adding the domains that I want federated. They have the same result.
2. The clients in each situation are set to show their presence information (use the global admin-selected setting) by default.
3. The "main" domain uses ADFS to authenticate against our AD, which works correctly (in the case of logging into the portal and into the hosted OWA at least).
4. The "partner" domain is purely using Online Services
I am at a loss since the error seems fairly straightforward, but at the same time the setting to allow federation between domains also seems straightforward. Any help would be much appreciated.