Iron port single sign issue

[igbinosuneric]

Hello 

i have integrated the WSA with active directory 

configured single sign on 

but Microsoft lync still prompts for authentication

please what  can i do to resolve this 

thanks guys 

[Ken Stieers · Accepted solution]

I'm going to make some assumptions:

• You're using Lync in the cloud
• Lync is running at startup
• the user hasn't opened any web page yet.
• The prompt is web access related, NOT the actual lync login.

Try this for me. Exit Lync, use a browser and hit an external web page.  Start Lync (with or without the browser open, doesn't matter).  It should work...

The issue is that Lync can't handle the web auth request (Outlook can't either).

You have 2 options.

• Figure out which user-agent string Lync is using and create an identity in the WSA for it, and a policy that doesn't require auth for that user-agent.
• Deploy a CDA so that logins are picked up from the domain controllers and passed to the WSA before the users session actually gets to the point where its needed.

[igbinosuneric]

hello ken 

thanks for the reply 

by any chance, would you know the agent used by microsoft lync 

doing my research and am coming up short 

thanks 

[Tim Schneider]

Useragent string looks like this:

UCCAPI/15.0.4420.1017 OC/15.0.4420.1017 (Microsoft Lync)

the version numbers vary depending on your version, obviously.

Look at the screenshots on how to find it (In the second image, the version is the first number within the brackets, meaning 15.0.4481.1000)

[igbinosuneric]

Hello all

I configured the ip addresses of the Lync servers in a custom URL 

configured a identity which referenced the custom url 

then in the global decryption policy i configured a pass through function for the custom URL 

and that was it 

[Ken Stieers]

look here: http://lmgtfy.com/?q=lync+user+agent

You can use regex for the agent string, so "\(Microsoft Lync\)" ought to work.