7800/8800 Certificate Based Auth via MRA?

[devils_advocate]

Hi

We are looking at enabling Cert based auth via MRA for our Jabber users but we also have a number of Desk phones.

Do the desk phones support Cert based auth via MRA?

Obviously we don't want to leave LDAP as an option on the Expressway boxes as well as SAML SSO as this defeats the point, we just want SAML SSO as an option only with no ability to do LDAP via MRA.

Thanks

[lior look]

yes these phone model support MRA deployment.

but you have to sign your edge's certificates by one of the trust CAs as the phones support with.

because if the phones seat outside your network, they don't have CTL/ITL to trust internal certificates.

you can still using LDAP authentication.

when the phone will reach the edge, you will see prompt for insert credentials on the phone.

you have to sure your phones have NTP sinchronized also by DHCP option 42 or by the default NTP worldwide as the phone discover.