CUCM SSO Metadata Update

Shinnosuke Takeda · ‎12-23-2015

Hellow,

We are using SSO on CUCM, CUC, WebEx Meetings, WebEx Messenger.

Token signing certificate in WebEx will expire soon.

Hence, we are planning to update the certificate.

I suppose that we only have to import a new certificate to WebEx,

we don't have to re-export a metadate from WebEx nor re-import that to ADFS.

How about CUCM and CUC?

We have to re-export and re-import metadatas?

Does the expiration of the token signing certificate affect to CUCM and CUC?

(We enabled SSO on CUCM, CUC, WebEx on the same date.)

Please tell me how to update CUCM/CUC SSO?

(Or, we have to nothing to do for this?)

Md Hasan · ‎12-24-2015

AFAIK, SSO metadata file does host the certificate information, so most likely you'll need to re-import the metadata information. If you open up existing metadata with notepad, you'll see certification info exists in X.509 format. There is "update metadata file" options in Call Manager SAML Single Sing-On option from System menu. Same for CUC

Shinnosuke Takeda · ‎12-24-2015

Hi Hasan,

Thank you for your reply.

I saw the existing metadata, and confirmed X.509 format certificate.

What I should do is:

1. Export a new metadata from the IdP.

2. Import the IdP metadata via "update metadata file" option in the admin page.

Is that right?