Intergration Between CUCM and Active Directory

[tahseensheir1]

Hello all ,

I want to integrate CUCM system with Active Directory so all users will be managed by AD and I know that could be done by LDAP configuration on cucm , but what I need to know is that if we can add all data on active directory (Username , Password , Extension number) so once the phone plugged it asks the user about username and password to authenticate and synchronize all data from active directory and register the phone.

Thanks

[Mohammed Khan]

Yes that's possible with self provisioning feature of CUCM.

http://www.netcraftsmen.com/cucm-self-provisioning/

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/admin/10_0_1/ccmcfg/CUCM_BK_C95ABA82_00_admin-guide-100/CUCM_BK_C95ABA82_00_admin-guide-100_chapter_01101001.html

https://www.youtube.com/watch?v=ZleSgStnad0

Regards,

Mohammed Noor

[tahseensheir1]

This procedures I have to follow after configuring LDAP ?

[Mohammed Khan]

Yes that's correct.

Refer below link

http://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/118910-technote-cucm-00.html

[Jaime Valencia]

If this is a greenfield deployment, you actually want to get everything configured BEFORE the LDAP sync, that way you'll get pretty much all the config that is required, including the DNs.

Automatically generating the DNs, is only done at the first sync of the users, once the user is already synced, they will not be created. It would only work for new users.

I cover all the config and also how to use this to get things ready for Jabber using the same in two videos

https://www.youtube.com/playlist?list=PLFuOESqSTxEvZChqWgAJanctohRMe99CR

[tahseensheir1]

I make the configuration on the active directory by adding users including his IP Phone number , I don't know if it possible or not for cucm to get this ext number from AD , I follow the configuration in Mohamed video and it synced all the users successfully but the service self user ID is not working also when I called the CTI DN from the phones it asked about authentication number but I didn't configure any PIN when configuring the Self Provisioning  ,, I will follow again your video and see what will be the result

[Jaime Valencia]

Yes it's possible, and that's actually a requirement for self-provisioning to work, the DNs have to be created before you try to use the service, and they have to be assigned to the users.

But you can certainly create the DNs from the LDAP field your going to sync from, however.