[cisco-voip] UC SSO question

[Matthew Loraditch]

It may be that Windows knows you are using cached credentials and when accessing something live it forces to reauthenticate. I think this is a question more for the Microsoft forums. If Jabber works w/o a pop-up on the LAN then it's not Jabber itself requiring that authentication.

Matthew G. Loraditch - CCNP-Voice, CCNA-R&S, CCDA
Network Engineer
Direct Voice: 443.541.1518

Facebook | Twitter | LinkedIn | G+

-----Original Message-----
From: cisco-voip [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Ahmed Abd EL-Rahman
Sent: Thursday, October 8, 2015 2:49 PM
To: Brian Meade <bmeade90 at vt.edu>
Cc: cisco-voip at puck.nether.net
Subject: Re: [cisco-voip] UC SSO question

Hi Brian,
Yes I use MRA and did what you have mentioned but still the Jabber client asks for credentials from outside the network!!??

Any suggestions for a good tested configuration example for this setup please?





Best Regards

Ahmed Abd EL-Rahman
Senior Network Engineer

On Oct 8, 2015, at 4:45 PM, Brian Meade <bmeade90 at vt.edu<mailto:bmeade90 at vt.edu>> wrote:

Are you using MRA for external logins?  If so, you can add the Identity Provider on the Expressway-C and then enable SSO on the Expressway-C and Expressway-E.

The Identity Provider has to be accessible externally though.

On Thu, Oct 8, 2015 at 8:32 AM, Ahmed Abd EL-Rahman <Ahmed.Rahman at bmbgroup.com<mailto:Ahmed.Rahman at bmbgroup.com>> wrote:
Hi Gents,

I have configured all my UC 10.5 cluster services (including Cisco WebEx Meeting Server 2.5 MR5) for SSO. CUCM, Jabber desktop client, and WebEx access working correctly with SSO from the corporate LAN with PCs joined to the domain, which how it should work without having to re-enter any credentials when accessing these service.

My question is a laptop for example which already joined the domain is trying to access the UC services from outside the network (Jabber Desktop client and webex) as they are both configured with public access, should the SSO works with this laptop from outside exactly the same way as it works from corporate LAN so that the user doesn't have to enter any credentials manually or it is normal to be prompted for credentials when he access from outside the corporate network ? I'm asking about SSO nature.





Best Regards

Ahmed Abd EL-Rahman
Senior Network Engineer


_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip


_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip