cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
450
Views
0
Helpful
5
Replies
Highlighted
Beginner

Iron port single sign issue

Hello 

i have integrated the WSA with active directory 

configured single sign on 

but Microsoft lync still prompts for authentication

please what  can i do to resolve this 

thanks guys 

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Engager

I'm going to make some assumptions:

  • You're using Lync in the cloud
  • Lync is running at startup
  • the user hasn't opened any web page yet.
  • The prompt is web access related, NOT the actual lync login.

 

Try this for me. Exit Lync, use a browser and hit an external web page.  Start Lync (with or without the browser open, doesn't matter).  It should work...

 

The issue is that Lync can't handle the web auth request (Outlook can't either).

You have 2 options.

  • Figure out which user-agent string Lync is using and create an identity in the WSA for it, and a policy that doesn't require auth for that user-agent.
  • Deploy a CDA so that logins are picked up from the domain controllers and passed to the WSA before the users session actually gets to the point where its needed.

 

 

 

 

View solution in original post

5 REPLIES 5
Highlighted
Engager

I'm going to make some assumptions:

  • You're using Lync in the cloud
  • Lync is running at startup
  • the user hasn't opened any web page yet.
  • The prompt is web access related, NOT the actual lync login.

 

Try this for me. Exit Lync, use a browser and hit an external web page.  Start Lync (with or without the browser open, doesn't matter).  It should work...

 

The issue is that Lync can't handle the web auth request (Outlook can't either).

You have 2 options.

  • Figure out which user-agent string Lync is using and create an identity in the WSA for it, and a policy that doesn't require auth for that user-agent.
  • Deploy a CDA so that logins are picked up from the domain controllers and passed to the WSA before the users session actually gets to the point where its needed.

 

 

 

 

View solution in original post

Highlighted

hello ken 

thanks for the reply 

by any chance, would you know the agent used by microsoft lync 

doing my research and am coming up short 

thanks 

 

Highlighted

Useragent string looks like this:

 

UCCAPI/15.0.4420.1017 OC/15.0.4420.1017 (Microsoft Lync)

 

the version numbers vary depending on your version, obviously.

Look at the screenshots on how to find it (In the second image, the version is the first number within the brackets, meaning 15.0.4481.1000)

Highlighted

Hello all

I configured the ip addresses of the Lync servers in a custom URL 

 

configured a identity which referenced the custom url 

 

then in the global decryption policy i configured a pass through function for the custom URL 

 

and that was it 

Highlighted

look here: http://lmgtfy.com/?q=lync+user+agent

You can use regex for the agent string, so "\(Microsoft Lync\)" ought to work.

 

 

This widget could not be displayed.