Jabber on Premise - SSO enable - login

[Jes80]

Hello,

Can anyone share,  what login prompt we will getting after enabled SSO on UCM and IM&P for Jabber on-premise internal.

Do we just login on SSO menu or need to login to Jabber prompt after SSO login menu?

We plan to  enable SSO on UCM and IM&P , but want to know user login behaviour before we roll out.

Thanks,

J

[Roger Kallberg · Accepted solution]

If you have setup everything correctly you should just get the IdP login, if even that as the credentials used on the device should be seamlessly passed along to the login flow when you start Jabber.

[Jonathan Schulenberg · Accepted solution]

SAML SSO cookies tend to expire in a day or less. Jabber has to redirect the user back to the IdP each time this happens. I recommend that you also enable CUCM/CUC/Expressway OAuth and CUCM SIP OAuth to address this. Jabber can use OAuth tokens to reduce how often the user needs to perform an SSO login (once every 60 days by default). While not directly related to logins, CUCM Push Notifications / Cloud Onboarding are also worth enabling.

[Jes80]

After enabled SSO on UCM.  Beside this setting, Is there any other  config or setting I need to set to make sure Jabber login using SSO?

[Roger Kallberg]

If you look in the Jabber configuration parameter documentation you would see that this value is default true, so you do not need to set that in the configuration. In general you should only include values that are altered from the default to not clutter up your configuration.

[Jes80]

Excellent,  

Regarding this " In general you should only include values that are altered from the default to not clutter up your configuration."

What other value you recommend for SSO in Jabber?

[Roger Kallberg · Accepted solution]

No value is needed for SSO in the Jabber configuration.