[cisco-voip] On-Prem UC and SAML SSO

Hi all, Single-Sign-On. Anyone seen it where the Unity Connection "enable SSO" button is greyed out? CUCM - SSO is configured. Jabber on-prem signs in and phone services pre-populate. Ucmuser page works fine. When I login remotely over MRA on a different computer it prompts me for account

Re: [cisco-voip] CUCM requirements for AD account import - anything else other than SN=* (non-empty) ?

We also map mail to directoryURI , and enable IM automatically, so I added a concat (&(mail=*)) to ensure we don’t sync people without a URI. From: cisco-voip On Behalf Of Lelio Fulgenzi Sent: Thursday, January 30, 2020 6:45 PM To: Hunter Fuller Cc: Charles Goldsmith ; voyp list, cisco-voip

Re: [cisco-voip] CUCM requirements for AD account import - anything else other than SN=* (non-empty) ?

Using the ipPhone field is an option. However, it’s a bit of a chicken and egg thing. They don’t have an extension until we assign it. And we can’t import them until they have the number in that field. So we’d have to assign them an extension, modify the attribute, then sync manually, then

Re: [cisco-voip] CUCM requirements for AD account import - anything else other than SN=* (non-empty) ?

On Thu, Jan 30, 2020 at 4:51 PM Lelio Fulgenzi wrote: > We can’t filter on anything telephone number based. Sounds silly, but the > information in the directory doesn’t always jive with what someone wants, > extension wise. > This was true for us. Our solution was to populate the ipPhone field

Re: [cisco-voip] CUCM requirements for AD account import - anything else other than SN=* (non-empty) ?

We can’t filter on anything telephone number based. Sounds silly, but the information in the directory doesn’t always jive with what someone wants, extension wise. That being said, I took the CUCM docs to heart and made sure to add the default filter they use but don’t show….

Re: [cisco-voip] CUCM requirements for AD account import - anything else other than SN=* (non-empty) ?

This is what I recommend to customers, users, not pc's and the ipPhone field is populated. (&(objectclass=user)(!(objectclass=Computer))(ipPhone=*)) On Thu, Jan 30, 2020 at 3:34 PM Lelio Fulgenzi wrote: > > OK - I'm trying to reconcile accounts being imported into CUCM before I > modify the

Re: [cisco-voip] CUCM requirements for AD account import - anything else other than SN=* (non-empty) ?

OK. My reconcile was off by more…. The numbers were off by one. This stems from getting errors from unity trying to sync more than one account with the same email address. We have a process issue that needs to be corrected, but it takes time each time this crops up. When I searched for the

Re: [cisco-voip] CUCM requirements for AD account import - anything else other than SN=* (non-empty) ?

I think you understand it correctly. Unless we're both wrong. Are you using the same filter in both CUCM as the LDAP browser (can you share it?)? Same search base? Same user to BIND with? Same AD or GC server? Same Port? Same TLS setting? Do you know which user account is the anomaly? On

[cisco-voip] CUCM requirements for AD account import - anything else other than SN=* (non-empty) ?

OK - I'm trying to reconcile accounts being imported into CUCM before I modify the filter we're using. I've used the base filter suggested, plus I've added the (sn=*) to ensure we get only accounts with non-empty last names. However, my reconciliation is off by 1 (including taking into

Re: [cisco-voip] CCX phone agent over MRA?

Has anyone done a Agent with a hard phone over MRA (8865)? Finding the documents don't really come out and say if it is supported or not. See the notes about expressway versions and that is about it. How about extension mobility login on MRA hard phone for agent use? Erick On Thu, Jan 23,

Re: [cisco-voip] HTTP Response for HTTP Triggered Script

Thanks for adding to the conversation Mike. I did some testing and, here is the script I am testing with: [image: image.png] If I open up the dev tools in FF, the browser is spinning the whole 20sec, and there is no status code next to the request. (not a very exciting screenshot): [image: