Jabber SSO AuthN / AuthZ

[wimarques]

Dear community,

I was reading documentation on how implementing SSO for Jabber in CSR 12 and above and I have some questions

Is it possible to enable only SAML and not OAuth2 in an on prem scenario to enable SSO for jabber?

Then what would be the benefit to enable OAuth2 over SAML SSO ?

If SAML only how do you manage timers and what would be the recommended values in order avoid user re authentication?

I'm about to configure SAML only for my customer and enable Kerberos Auth for Jabber to avoid user authN but each most of Cisco Live Presentations and Documentes uses both SAML an OAuth2 when enabling SSO. I'm desapointed and can't understand if OAuth2 is required or optional and his benefit over SAML .

Thanks for your advises

[Roger Kallberg]

OAuth2, with refresh token, is used by Jabber for fast login. Without it the sequential login will take substantially longer and might render in lost calls due to it takes to long to reconnect.