Installing the On-Premise Systems

A Lync hybrid deployment starts with the installation of the on-premise Lync infrastructure, if there is no existing Lync environment in place. At a minimum, the on-premise deployment requires one Front End pool and one Edge pool, with the Edge pool enabled for federation. Although a Lync 2010 Front End pool and Edge pool can be used for this, at least one Lync 2013 Front End Server needs to be installed to support advanced voice features. For further details on the on-premise topology options supported for a hybrid deployment, see Chapter 28. Although it’s not required, consideration should be given to building high-availability into the solution, leveraging the built-in resilience features of Lync 2013. For details regarding the planning process for the Lync on-premise systems, see Chapters 29 to 32.

After the Lync on-premise installation is in place and functional, and the Lync Online or Office 365 subscription is active, the next steps are required to prepare the on-premise systems for a hybrid deployment:

• If it has not already been added, the SIP domain that will be split between the on-premise and cloud deployment will need to be added to Lync Online/Office 365, with the ownership verified. For details on this procedure, see the “Adding Domains to Lync Online/Office 365” section of this chapter.

• Install Active Directory Federated Services to enable SSO for the hybrid deployment, using a minimum of one federation server. If users will be connecting remotely, at least one AD FS proxy should also be included, and should be installed in a DMZ subnet. As part of the deployment, request an SSL certificate from a public certificate authority with the sts.<SIPdomain> name specified as the subject name, and apply the certificate to the Default Web Site on both the federation server and the federation proxy server systems.

• After the internal federation service is operational, a trust relationship must be established with the Lync Online/Office 365 deployment. For details on planning AD FS for use with Lync Online, see Chapter 28. For details on installing AD FS and configuring it for SSO with Lync Online, see the “AD FS Deployment for SSO” section of this chapter.

• Activate the online tenant for AD synchronization; then configure directory synchronization between the on-premise Active Directory and the Lync Online/Office 365 directory, and synchronize the on-premise users and groups to Lync Online. For details on planning directory synchronization between AD and Lync Online/Office 365, see Chapter 28. For details on installing and configuring directory synchronization, see the “Configuring Directory Synchronization” section of this chapter.