<div dir="ltr">Thanks Chris, I checked all that out and it looks alright.<div><br></div><div>In testing this afternoon, we've gotten the UCXN SSO to work on a couple occasions but it doesn't stay. The Jabber client ends up not logging into voicemail and in the Jabber client File>Options>Accounts, it wants the user to enter their credentials. Jabber shouldn't be allowing users to enter their credentials in the client with SSO enabled.</div><div><br></div><div>I turned up samltrace to debug on UCXN and pulled the logs. Jabber doesn't even seem to be hitting the UCXN server when it fails, it's like Jabber doesn't realize UCXN is SSO enabled. I'm opening a case with Webex Messenger support to start, then will see where that goes.</div><div><br></div><div>Justin</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Jun 10, 2015 at 1:39 PM, Chris Clouse <span dir="ltr"><<a href="mailto:Chris.Clouse@cdw.com" target="_blank">Chris.Clouse@cdw.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p><u></u><span style="font-size:11.0pt;font-family:Symbol;color:#1f497d"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><u></u><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Verify the following Unity Connection Services are started.
<u></u><u></u></span></p>
<ul type="disc">
<ul type="disc">
<li class="MsoNormal" style="color:#1f497d">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Connection Jetty <u></u>
<u></u></span></li><li class="MsoNormal" style="color:#1f497d">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Connection REST Service
<u></u><u></u></span></li></ul>
</ul>
<p><u></u><span style="font-size:11.0pt;font-family:Symbol;color:#1f497d"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><u></u><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Verify the class of service has Allow Users to Use the Web Inbox and RSS Feeds, Allow Users to Access Voice Mail Using an IMAP Client and/or Single
Inbox, Allow Users to Use Unified Client to Access Voice Mail enabled <u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p><u></u><span style="font-size:11.0pt;font-family:Symbol;color:#1f497d"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><u></u><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Verify the Unity Connection API Settings are enabled (System Settings->Advanced->API Settings)
<u></u><u></u></span></p>
<ul type="disc">
<ul type="disc">
<li class="MsoNormal" style="color:#1f497d">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Allow Access to Secure Message Recordings through CUMI
<u></u><u></u></span></li><li class="MsoNormal" style="color:#1f497d">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Display Message Header Information of Secure Messages through CUMI
<u></u><u></u></span></li><li class="MsoNormal" style="color:#1f497d">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Allow Message Attachments through CUMI
<u></u><u></u></span></li></ul>
</ul>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Also make sure that you don’t have <VoicemailService_UseCredentialsFrom>phone</VoicemailService_UseCredentialsFrom> in your jabber-config.xml file as it will
need to have a separate login for the voicemail server versus CallManager.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1f497d">~Chris</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Justin Steinberg [mailto:<a href="mailto:jsteinberg@gmail.com" target="_blank">jsteinberg@gmail.com</a>]
<br>
<b>Sent:</b> Wednesday, June 10, 2015 12:30 PM<br>
<b>To:</b> Chris Clouse<br>
<b>Cc:</b> Cisco VOIP<br>
<b>Subject:</b> RE: [cisco-voip] Hosted Jabber, SSO and onprem UCM and UCXN<u></u><u></u></span></p><div><div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<p>Yes I've done that. The Unity Connection Web Inbox and UCM Self Care Portal page both have functioning SSO. It's just Jabber that won't utilize SSO when using CUC.<u></u><u></u></p>
<p>Justin<u></u><u></u></p>
<div>
<p class="MsoNormal">On Jun 10, 2015 1:16 PM, "Chris Clouse" <<a href="mailto:Chris.Clouse@cdw.com" target="_blank">Chris.Clouse@cdw.com</a>> wrote:<u></u><u></u></p>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">In order for the phone services and voicemail to be connected via SSO, CUCM and UCXN will also need
to be enabled for SAML SSO on their own as well as having the WebEx Messenger SSO. I would recommend that you be on 10.5+ even though it states supported with 10.0.</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><a href="http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/SAML_SSO_deployment_guide/10_0_1/CUCM_BK_SB003832_00_saml-sso-deployment-guide-for/CUCM_BK_SB003832_00_saml-sso-deployment-guide-for_chapter_010.html" target="_blank">http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/SAML_SSO_deployment_guide/10_0_1/CUCM_BK_SB003832_00_saml-sso-deployment-guide-for/CUCM_BK_SB003832_00_saml-sso-deployment-guide-for_chapter_010.html</a>
</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"> </span><u></u><u></u></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1f497d">~Chris</span></b><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"> </span><u></u><u></u></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> cisco-voip [mailto:<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a>]
<b>On Behalf Of </b>Justin Steinberg<br>
<b>Sent:</b> Wednesday, June 10, 2015 12:09 PM<br>
<b>To:</b> Cisco VOIP<br>
<b>Subject:</b> [cisco-voip] Hosted Jabber, SSO and onprem UCM and UCXN</span><u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p>Has anyone setup SSO in the hybrid Jabber deployment model?<u></u><u></u></p>
<p>Customer has hosted WebEx Messenger Jabber, on-prem CUCM, and UCXN. We have enabled SSO for all three systems. We can use SSO to login to jabber and the UCM and UCXN end user self service web interfaces. All that seems OK and SSO is working. <u></u><u></u></p>
<p>The problem is that once jabbers logs in to WebEx Messenger, it requires the user to go into file>options and manually enter their voicemail credentials. <u></u><u></u></p>
<p>I expect that it should just SSO into WebEx messenger, UCM phone services and UCXN voicemail services. <u></u><u></u></p>
<p>Any thoughts?<u></u><u></u></p>
<p>Justin<u></u><u></u></p>
</div>
</div>
</blockquote>
</div>
</div></div></div>
</div>
</blockquote></div><br></div>