SSO for authentication with Muliple domains

[Abdelrhman Elmenyawe]

Can I use SSO with CUCM to authenticate users who have different domains?

whether these users exist on the same AD or different ADs.

I know that we can use multi-forest, if it isn't available can we rely on SSO with IDP?

[Jonathan Schulenberg]

That’s entirely up to the SAML IdP. CUCM doesn’t care what the IdP authenticates against or the method of authentication, only that it gets a SAML response indicating the user is authorized.

[Abdelrhman Elmenyawe]

So if the idp has all users with different domains, and those users existing also at cucm.

Therefore This method of authentication will be fine.

[Roger Kallberg · Accepted solution]

As long as the users are synced into CM from an LDAP source and have the value that you defined as the uid in your IdP it should work. It won’t work with local CM created user accounts as they won’t trigger the request to the IdP.

[Abdelrhman Elmenyawe]

@Jonathan Schulenberg  hello sir, appreciate your kind feedback on my reply to make sure that i have understood you.