Cisco SSO with Azure

• https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/SAML_SSO_deployment_guide/Azure/cucm_b_saml-sso-microsoft-azure-idp.html
• https://sstoitsev.medium.com/cucm-sso-with-azure-ad-1d6ccaa55656
• https://help.webex.com/en-us/mfu88u/Control-Hub-Single-Sign-On-Integration-with-Microsoft-Azure
• https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-ports

• CUCM, IMP, Unity and Expressway 12.5 SSO
• Cisco SSO - Features and Services Guide

• uid = SAM account name or Givenname?
• What about UDP login, if using SAM today and switch to email?

• https://www.cisco.com/c/en/us/support/docs/unified-communications/jabber-windows/118774-configure-jabber-00.html

Note: After SSO is enabled on CUCM and IMP, by default all Jabber users sign in with SSO. Administrators can change this on a per user basis so that certain users do not use SSO and instead sign in with their Jabber usernames and passwords. In order to disable SSO for a Jabber user, set the value of the SSO_Enabled parameter to FALSE.

• Unity Connection 12.X SSO Quick Start Guide

• https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/expressway/config_guide/X12-5/exwy_b_mra-expressway-deployment-guide/exwy_b_mra-expressway-deployment-guide_chapter_01000.html#reference_8B19DC0D3AA8D1CF481D1D505057A809
• https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/expressway/config_guide/X12-7/exwy_b_mra-deployment/exwy_m_basic-configuration.html#task_A458A57F311E876761D31B48B30F5AD5

• Unity Connection SSO Troubleshooting Guide

• Review and confirm NTP Status on all relevant machines
• Configure SSO on internal Servers first, then Expressways.

Make sure to system admins users can log in with their LDAP account and have the correct admin access in advance of SSO config.

• When enabling SSO mode from Cisco Unity Connection Administration, make sure you have at least one LDAP user with administrator rights in Unity Connection to Run SSO Test for SAML SSO.
  
• Assign the system administrator role to the user accounts to allow them to access Unity Connection administrative and serviceability web applications.

• http://orourke.tv/web/doku.php?id=vendors:cisco:uc:cucm:sso

• How does Jabber with SSO - does it use a 'Jabber' browser to redirect to IdP login?
• if CUCM is using SAM for userid in CUCM - how to use email address?
• for UDP can be decide to use a different SAM while Jabber is using email.

• https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-saml-claims-customization