Azure AD Services integration with CUCM

[Mark Lyman]

We have a customer that would like to integrate their Azure AD Services as both the LDAP Directory and Authentication source.

Although I think this might be possible, I can't find any documentation to back me up... except a document on how to do it with WebEx.

Has anyone tried this type of integration?  Azure to CUCM?  Or does anyone have any opinions or thoughts on it?

[Jaime Valencia]

That's not supported.

[Wagner Jose Fernandes Junior]

Hello!!!!

Please, and now, is Azure AD supported?

Thanks

Wagner Fernandes

[Roger Kallberg]

The recently released information about Azure and CUCM that I’ve heard of revolves around SSO and SAML integration, not LDAP directory synchronisation and authentication. With this it’s AFAIK still not supported.

[Roger Kallberg]

For more information about the SSO part have a look at this post. https://community.cisco.com/t5/collaboration-applications/jabber-sso-login-with-azure-ad/m-p/4146376/highlight/true#M43914

[Wagner Jose Fernandes Junior]

Thanks Roger,

  There is another thread about this, here https://community.cisco.com/t5/collaboration-applications/jabber-sso-login-with-azure-ad/td-p/3793649.

I migrated all 5 cluster of company to azure sucessfully.

Thanks

[Jonathan Schulenberg]

As Jaime mentioned, not supported. Here’s the relevant document to back that statement up:
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/admin/12_0_1/systemConfig/cucm_b_system-configuration-guide-1201/cucm_b_system-configuration-guide-1201_chapter_0100101.html#CUCM_TP_LC99B642_00

Also, my crude understanding is that Azure AD is *not* full AD; it doesn’t have all the same attributes. You could test it, assuming you’re willing to self-support, but the first thing I would examine carefully is whether every attribute CUCM looks for is in the Azure AD schema. That includes the non-visible ones (eg ObjectClass and ObjectGUID) as well as the built-in LDAP filter (eg userAccountControl).

[Sergherr]

Per documentation:

Configure Azure as Identity Provider Complete these tasks to configure Microsoft Azure as your Identity Provider for Cisco Collaboration applications. Before you begin Your LDAP Directory sync must be synced from an on-premise directory server. Syncing users or enterprise groups from the Azure Active Directory is not supported. https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/SAML_SSO_deployment_guide/Azure/cucm_b_saml-sso-microsoft-azure-idp.html

if this helps, please rate