Unity Connection - "User Must Change at Next Sign-In" keep being checked

[hoanghiep]

Unity Connection - "User Must Change at Next Sign-In" keep being checked

Hello,

We have a CUCM and Unity Connection 11.5.1.15900-18, PIN sync is enabled. In both CUCM and CUC, we use Authentication policy that has "Credential Expires After" set to "Never Expires".

However, recently some users complain that they cannot log in voicemail and we found the option "User Must Change at Next Sign-In" is checked. And it did not get unchecked after users reset their PIN from user selfcare portal (https://<cucm>/ucmuser), or when the PIN is reset from CUCM administration web page.

Can someone advise what is wrong here and how to prevent it from happening.

Thanks,

hoanghiep

[Vaijanath Sonvane]

Hi,

Please check below troubleshooting steps:

• Check certificates are uploaded properly.
• Ensure that you have checked the Enable End User Pin Synchronization on in CUCM and Unity Connection
• Ensure that you have assigned the AXL role to App users.

https://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/200978-How-to-Enable-Common-PIN-for-UCM-and-UC.pdf 

[Adam Pawlowski]

I think that will be checked if the credential policy is expiring their PIN

[hoanghiep]

Hi Adam,

Our authentication policy has "Credential Expires After" set to "Never Expire"

Regards,

Hiep.