Probably worth pulling a problem report right after sign in. It should show the process of checking if SSO is enabled for Unity Connection.
On Wed, Jun 10, 2015 at 4:33 PM, Justin Steinberg <[email protected]> wrote: > Thanks Chris, I checked all that out and it looks alright. > > In testing this afternoon, we've gotten the UCXN SSO to work on a couple > occasions but it doesn't stay. The Jabber client ends up not logging into > voicemail and in the Jabber client File>Options>Accounts, it wants the user > to enter their credentials. Jabber shouldn't be allowing users to enter > their credentials in the client with SSO enabled. > > I turned up samltrace to debug on UCXN and pulled the logs. Jabber > doesn't even seem to be hitting the UCXN server when it fails, it's like > Jabber doesn't realize UCXN is SSO enabled. I'm opening a case with > Webex Messenger support to start, then will see where that goes. > > Justin > > On Wed, Jun 10, 2015 at 1:39 PM, Chris Clouse <[email protected]> > wrote: > >> · Verify the following Unity Connection Services are started. >> >> - Connection Jetty >> - Connection REST Service >> >> · Verify the class of service has Allow Users to Use the Web >> Inbox and RSS Feeds, Allow Users to Access Voice Mail Using an IMAP Client >> and/or Single Inbox, Allow Users to Use Unified Client to Access Voice Mail >> enabled >> >> >> >> · Verify the Unity Connection API Settings are enabled (System >> Settings->Advanced->API Settings) >> >> - Allow Access to Secure Message Recordings through CUMI >> - Display Message Header Information of Secure Messages through >> CUMI >> - Allow Message Attachments through CUMI >> >> Also make sure that you don’t have >> >> <VoicemailService_UseCredentialsFrom>phone</VoicemailService_UseCredentialsFrom> >> in your jabber-config.xml file as it will need to have a separate login for >> the voicemail server versus CallManager. >> >> >> >> *~Chris* >> >> >> >> *From:* Justin Steinberg [mailto:[email protected]] >> *Sent:* Wednesday, June 10, 2015 12:30 PM >> *To:* Chris Clouse >> *Cc:* Cisco VOIP >> *Subject:* RE: [cisco-voip] Hosted Jabber, SSO and onprem UCM and UCXN >> >> >> >> Yes I've done that. The Unity Connection Web Inbox and UCM Self Care >> Portal page both have functioning SSO. It's just Jabber that won't >> utilize SSO when using CUC. >> >> Justin >> >> On Jun 10, 2015 1:16 PM, "Chris Clouse" <[email protected]> wrote: >> >> In order for the phone services and voicemail to be connected via SSO, >> CUCM and UCXN will also need to be enabled for SAML SSO on their own as >> well as having the WebEx Messenger SSO. I would recommend that you be on >> 10.5+ even though it states supported with 10.0. >> >> >> >> >> http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/SAML_SSO_deployment_guide/10_0_1/CUCM_BK_SB003832_00_saml-sso-deployment-guide-for/CUCM_BK_SB003832_00_saml-sso-deployment-guide-for_chapter_010.html >> >> >> >> *~Chris* >> >> >> >> *From:* cisco-voip [mailto:[email protected]] *On >> Behalf Of *Justin Steinberg >> *Sent:* Wednesday, June 10, 2015 12:09 PM >> *To:* Cisco VOIP >> *Subject:* [cisco-voip] Hosted Jabber, SSO and onprem UCM and UCXN >> >> >> >> Has anyone setup SSO in the hybrid Jabber deployment model? >> >> Customer has hosted WebEx Messenger Jabber, on-prem CUCM, and UCXN. We >> have enabled SSO for all three systems. We can use SSO to login to jabber >> and the UCM and UCXN end user self service web interfaces. All that >> seems OK and SSO is working. >> >> The problem is that once jabbers logs in to WebEx Messenger, it requires >> the user to go into file>options and manually enter their voicemail >> credentials. >> >> I expect that it should just SSO into WebEx messenger, UCM phone services >> and UCXN voicemail services. >> >> Any thoughts? >> >> Justin >> >> > > _______________________________________________ > cisco-voip mailing list > [email protected] > https://puck.nether.net/mailman/listinfo/cisco-voip > >
_______________________________________________ cisco-voip mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-voip
