OAuth for Office 365 - Unity Connection 12.5 SU2

[mloraditch]

This just came out yesterday so this is more directed for anyone lurking at Cisco, but how is this supposed to work?

Our UM has been disabled for months because of MS security requirements for resellers that broke the old way so I quickly installed this in my test lab to see if it will fix my issue.

According to all the MS documentation there should be no need to use the old Autodiscover, etc that Unity was using. You just connect to the default outlook.office365.com EWS url and use your oauth info and boom. The whole point is to not have to setup an account with special permissions, etc.

However, the fields for the old account are still there and mandatory and all the test options are going through and failing Autodiscover…

If I look at the Mailbox Sync Logs I don’t see any evidence it’s trying to use Oauth/EWS.

Anyone in the know out there?

[Saima Harris]

Hi,

My customer is planning to migrate from EWS to Microsoft Graph.

We need to know if there is anything from Cisco Unified perspective that we need to be aware of or update.

Is there any Cisco guide for Cisco UCxn to work with and Microsoft Graph

Thank you

[Roger Kallberg]

From what I know CUC version 14 SU3 and onwards uses Graph instead of EWS.

[Liz Bentler]

Is there any documentation showing 14 SU3 uses graph instead and how to configure?

[Saima Harris]

Hi Liz,

This is the response I received from TAC:

The retirement of EWS would be until October 1st, 2026.
As you can confirm in this article from Microsoft:
https://techcommunity.microsoft.com/t5/exchange-team-blog/retirement-of-exchange-web-services-in-exchange-online/ba-p/3924440

But as for today, Unity still doesn’t support Graph, it only supports EWS.
And for the version you have today is 14SU3, you only need the following change:
a. (Applicable to 14SU3 and later releases) Click Application permissions and add full_access_as_app permission in your application. To restrict the permissions, see steps mentioned inTask List for restricting Application Permissions to mailboxes.

But since you have it already because of O365, then there is no change needed from your side regarding this change.
As you can confirm here:
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/connection/14/unified_messaging/guide/b_14cucumgx/b_14cucumgx_chapter_01.html#ID-2370-000005f5

For Graph the Developers from Cisco side are still doing tests to confirm if it would be possible to use it in a future.
But for now as I previously mentioned, is not supported.

[Roger Kallberg]

It is described in this document. Unified Messaging Guide for Cisco Unity Connection Release 14