Cisco Jabber Voicemail Problem

[Sandish-Gupta]

Problem:

The Voicemail of the Cisco Jabber does not work.

Error: Voicemail has stopped working.

Please pay attention to the screenshots.

 Note:

Phone and chat services of Cisco Jabber for users are working correctly and there are no problems.
Only the voicemail problem is the Cisco Jabber.

------------------

Click on the screenshots to see the screenshots in high quality.

 

When the "Voicemail_Enabled" policy is active, it gives the "Renew Session" error.

---------------------

my system info:

Windows Cisco Jabber Version 14.1.4.57561 Build 307561

CUCM 14.0.1.13900-155 (registered - has a license)

CUP 14.0.1.13900-8 (registered - has a license)

CUC 14.0.1.13900-70 (registered - has a license)

ADFS - Windows Server 2016 Datacenter

------------------

CUCM Service Profile Configuration Screenshots:

Click on the screenshots to see the screenshots in high quality.

-----------------------------------------

CUCM Jabber UC Service Config

 Please note that the following policies are active by default.
SSO_Enabled = true
Voicemail_Enabled = true

----

jabber-config file has been deleted from CUCM OS TFTP.

All jabber configurations are set in CUCM UC service.

----------------------------------

 CUC Screenshots:

Click on the screenshots to see the screenshots in high quality.

--------------

CUC SSO Status:

Note:

SSO Enabled on CUCM, CUP and CUC

SSO for managing CUC, CUCM, CUP Administration pages works correctly and has no problems.

CUC = SSL Certificates Status = Valid - OK [Multi SAN Certificate]
CUCM, CUP = SSL Certificates Status = Valid - OK [Multi SAN Certificate]

CUCM, CUP and CUC have ADFS SSO via Windows Server 2016 Datacenter.

-------------

CUCM and CUC have LDAP Configuration with Active Directory.

The following DNS records are set on DC and working correctly.

"cisco-uds" and "cuplogin" SRV Records

Users login to Cisco Jabber automatically with Active Directory credentials.

----------------

CSA Tool:

result of Analyze "Cisco Jabber PRT logs" via Cisco CSA Tool: OK - No problem

Click on the screenshots to see the screenshots in high quality.

------------------

Jabber logs:

jabber_log.log 

Note:

Line 24763: 2023-08-05 16:59:46,756 DEBUG [0x000027e8] [ailplugin\jabbervoicemailpanel.cpp(1742)] [VoicemailPlugin] [JabberVoicemailPanel::OnVoicemailUnRegistered] - Voice mail unregistered, error code: EmptySSOAuthTokenProvided

[d3an.chen]

Hi

   Have you read this Document before?

https://www.cisco.com/c/en/us/support/docs/unified-communications/jabber-windows/116517-problem-jabber-00.html

[Sandish-Gupta]

d3an.chen, thanks for the reply.
yes. I have read almost all official Cisco documents. and I could not find a solution.
regarding the document you linked to, if you look at the CUC screenshots in the first post, the "User Must Change at Next Sign-in" option is unchecked.

[d3an.chen]

Apparently, your issue is with the Oauth Token, either CUC can't get new token from CUCM or your Jabber client can't get token from the CUCM.
you can run following command on CUCM and CUC to find out if both has the same token for jabber login.  Make sure the necessary Oath services are enabled.
run sql select * from refreshtokendetails

refer to following document at page 16, for enabling the refresh token on CUC.   
https://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/jabber/11_9/Unified-CM-OAuth-Whitepaper-v17-FINAL.pdf

Let me know if this helps you.

Thanks

[Nithin Eluvathingal]

its a refresh token issues. Have fully configured Oauth ?

[Sandish-Gupta]

d3an.chen and Nithin Eluvathingal, thanks for replies.
I did not use OAuth. OAuth is disabled on UC.

[d3an.chen]

If you enabled the SSO on your CUCM that will tell your Jabber to use OAuth token to authenticate everything.

[Eric Tucker]

I have SSO enabled without SIP OAuth only Oauth and refresh token and it works fine, if you read all the Cisco docs then you read the part about the AuthZ server?