topic Webex Meetings/Teams Single Sign-On in Collaboration Applications

Webex Meetings/Teams Single Sign-On

Adam Roddy — Mon, 18 Mar 2019 02:49:36 GMT

I am setting up a new Webex deployment with SSO. I notice that even after SSO is setup, both the Webex Desktop App and Webex Teams still prompt my users to enter their email address even though they are on a domain PC. My expectation is that the SSO should use Integrated Windows Auth (IWA) and the apps should log in without the user having to enter their email address.

In comparison, Jabber SSO works perfectly. User logs into their domain PC, launches Jabber, and they never have to enter any username/credentials.

Also I set up the Webex integrations into Jabber, but when a user launches Jabber they get a Webex popup to enter email address. It would be much better if this integration could use SSO to automatically log in.

Is this type of SSO using IWA not available with Webex apps? Or am I doing something wrong? For reference I am using Okta as the IDP

Re: Webex Meetings/Teams Single Sign-On

Jonathan Schulenberg — Sat, 26 Jan 2019 15:40:29 GMT

To my knowledge, there is not a good solution to this at the moment. Webex uses the same collect-email-to-determine-identity-provider approach a lot of SaaS solutions do. In your case it redirects to Okta once it knows the user’s email/domain. The problem isn’t necessarily a lack of Kerberos/NTLM support (that’s up to the OS native browser to figure out) but with not being able to skip/auto-fill the email address so to start the SAML flow automatically. AFAIK that is a product limitation, I believe in Webex: Jabber has no machine-friendly way (eg browser URL parameter) to pass your email address to Webex. I can’t speak to roadmap details here but you’re welcome to discuss this with your Cisco AM/SE.

Re: Webex Meetings/Teams Single Sign-On

Ratheesh Kumar — Tue, 29 Jan 2019 01:47:32 GMT

Hi there

We recently deployed Webex teams and meetings SSO with Azure AD and it works perfectly. The application launches without prompting for credentials if the user logged in to domain PC with the credentials. Even though the user sign out from the machine or restart the machine, SSO works, except the user sign out from the client forcefully, next time it again request for authentication at microsoft login page. Below are the guides we followed.

https://collaborationhelp.cisco.com/article/en-us/mfu88u

https://collaborationhelp.cisco.com/article/en-us/WBX000022701

Hope this Helps

Cheers
Rath!
***Please rate helpful posts***

Re: Webex Meetings/Teams Single Sign-On

Adam Roddy — Thu, 31 Jan 2019 20:58:07 GMT

I was afraid this is the case....

Re: Webex Meetings/Teams Single Sign-On

Adam Roddy — Thu, 31 Jan 2019 20:58:41 GMT

So even for a new user/deployment... when a user logs into their PC for the first time, they do not have to type in an email address?

Re: Webex Meetings/Teams Single Sign-On

Ratheesh Kumar — Fri, 01 Feb 2019 20:54:58 GMT

Hi there

What I have observed is once the user logins in for the first time, she clicks the team client

he/she has to accept the agreement
enter the email id
Webex team embedded browser points to microsoft login (we user O365) and auto-redirect to Webex team client

The user will remain logged in even though you Logout or Restart the PC

Only the team ask for next authentication is when you forcefully Signout from the client

Hope this Helps

Cheers
Rath!
***Please rate helpful posts***