Saml SSO and MRA login

[dijin]

Hi ,

Is there a way to enable a local password for jabber MRA login in an SSO-enabled CUCM cluster?.

i am planning to implement SAML SSO in our cucm cluster to meet the security compliance but we have some special scenarios that some local user accounts created in cucm to login jabber/ip phone over MRA. Afaik, SSO enablement shifts all authentication to an external identity provider, which would in effect eliminate the possibility of local auth.  Please advise if any option you see to set up both SSO and Local authentication in Cucm.

CUCM version is 14Su3

[Ibrahim AlQumairi · Accepted solution]

As I know CUCM currently does not support concurrent use of local and Single Sign-On (SSO) authentication methods, especially for MRA. To enable SSO authentication, you will need to transition user accounts from local authentication to an Active Directory (AD) integration. Alternatively, you can maintain local authentication for all users and forego implementing SSO at this time.