EasyUC
4.8.7

EasyUC for Cisco

Setting up a presence profile

Create Microsoft tenant, Cisco access and user mapping for presence synchronisation.

EasyUC · Version 4.8.7

In EasyUC: Presence Sync → Presence profiles → Add presence profile

Images come from the EasyUC lab. Names and example values provide orientation. A different interface language is indicated beside the relevant image.

What it is for

Anyone using Cisco telephony and Microsoft Teams side by side does not see in Teams that a colleague is on a call on the Cisco phone, and does not see in Jabber that they are in a Teams meeting. The Presence Sync workspace synchronises these states.

The basis is one presence profile per customer. It contains three things: the access to Microsoft Graph for the tenant, the access to the Cisco side (CUCM with IM and Presence for Jabber, or the Webex cloud) and the rule by which EasyUC recognises the same person in both systems. A profile needs no SBC, no SIP port and no certificate. The three setup steps inside a profile are labelled in German in version 4.8.7, also in the English interface, and are quoted as shown.

A new profile starts switched off. You then activate synchronisation on the Configuration page. Tenants that already exist in EasyUC Teams appear as profiles marked Shared with Teams SBC and share the Graph access.

Prerequisites

  • The Presence Sync module is activated on the appliance. It runs as a service of its own and requires neither the Teams SBC nor the ACD.
  • Viewing profiles: ROLE_APP_PRESENCE_WORKSPACE and ROLE_APP_PRESENCE_TENANTS. Creating or changing profiles: additionally ROLE_APP_PRESENCE_TENANTS_EDIT. Cisco access and user mapping: additionally ROLE_APP_PRESENCE_SYNC and, for changes, ROLE_APP_PRESENCE_SYNC_EDIT. Administrators (ROLE_APP_ADMIN, ROLE_OWNER, ROLE_ADMIN or ROLE_SUPER_ADMIN) have all permissions.
  • In Microsoft Entra: an app registration with client ID and client secret. Application permissions User.Read.All, Presence.Read.All and Presence.ReadWrite.All with admin consent for the tenant.
  • For Jabber in the CUCM: AXL access to the user directory. You can take over an existing CUCM connection from EasyUC or enter address, version and user directly.
  • For Jabber on IM and Presence: the address of the presence web service, the presence domain, an application user with the role Admin-3rd Party API and a dedicated end user as observer who may read the presence status of the mapped Jabber users.
  • A field that carries the same value in Microsoft and Cisco, for example e-mail address or phone number.
  • Other prerequisites apply to Webex. See the chapter on presence with Cisco Webex.

Step by step: create a profile

  1. Select the Presence Sync workspace at the top. The Presence profiles list opens.
  2. Click Add presence profile.
  3. Step 1, Microsoft Teams verbinden: enter Profilname, Microsoft-Tenant-ID, Microsoft-Graph-Client-ID and Microsoft-Graph-Client-Secret.
  4. Step 2, Cisco-Umgebung verbinden: select CUCM / Jabber.
  5. Select Cisco-Zugang direkt einrichten (set up Cisco access directly) and enter the Name der Cisco-Verbindung. If an access is already stored for this client, select Vorhandene Presence-Verbindung instead.
  6. Under CUCM-Benutzerverzeichnis, select an existing CUCM connection. Or select CUCM-Zugang direkt konfigurieren and enter CUCM-AXL-Adresse, AXL-Version, AXL-Benutzer and AXL-Kennwort.
  7. Under Cisco IM and Presence, enter the Presence-Webservice-Adresse, the Presence-Domain, Presence-Anwendungsbenutzer, Presence-Anwendungskennwort and the Presence-Beobachterbenutzer.
  8. Step 3, Benutzer verknüpfen: select Kennzeichen vergleichen (compare identifiers). Select the Kennzeichen in Microsoft and the Kennzeichen in CUCM / Jabber, for example E-Mail and CUCM Mail-ID.
  9. Click Einrichtung speichern (save setup). EasyUC saves the Microsoft profile, the Cisco connection and the user mapping one after the other and reports Profil, Cisco-Zugang und Benutzerzuordnung gespeichert. Die EasyUC-Synchronisation ist ausgeschaltet. Prüfe jetzt die Zugänge und die Zuordnung.

Step by step: check accesses and mapping

  1. In step 1, click Microsoft Graph testen. The status changes to Graph geprüft.
  2. In step 2, click Cisco-Verbindung testen. The result lists the individual checks with name and message.
  3. In step 3, click Zuordnung prüfen (check mapping). The preview does not transfer any presence states.
  4. Read the counters Microsoft-Benutzer, Cisco-Benutzer, Eindeutig (unique), Nicht gefunden (not found), Mehrdeutig (ambiguous) and Manuell.
  5. Filter the table by Nicht gefunden or Mehrdeutig. For individual rows, select the matching Cisco user through Kandidaten manuell zuordnen ….
  6. Add exceptions under Manuelle Zuordnungen with Zuordnung ergänzen, using the Microsoft user ID and the Cisco user ID.
  7. Click Einrichtung speichern again.
  8. Click Synchronisation und Monitoring aktivieren at the bottom to switch to the Configuration page.

Fields and options

Fields and options
Field / actionMeaning and use
ProfilnameDisplay name of the profile, at most 190 characters. The customer name is common.
Microsoft-Tenant-IDDirectory ID of the Microsoft tenant.
Microsoft-Graph-Client-ID / Client-SecretCredentials of the Entra app. Stored secrets are not displayed. Empty fields keep the existing value.
CUCM / Jabber or Cisco WebexClient the customer uses. The client of an existing Cisco access cannot be changed afterwards.
Name der Cisco-VerbindungName of the stored Cisco access, at most 190 characters. One access can be used by several profiles. Changes then apply to all of them.
CUCM-AXL-AdresseHTTPS address of the AXL interface. It must end in /axl/, for example https://cucm-pub01.intern:8443/axl/.
AXL-VersionSelection from 10.0 to 15.0.
Presence-Webservice-AdresseHTTPS address of the presence web service on IM and Presence, with the path /presence-service.
Presence-DomainDomain of the Jabber addresses, for example example.com.
Presence-Anwendungsbenutzer / -kennwortCUCM application user with the role Admin-3rd Party API.
Presence-BeobachterbenutzerEnd user with read permission for the presence status of the mapped Jabber users. Without it EasyUC cannot read the Jabber status.
Erweiterte Cisco-EinstellungenAlternative Webservice-Adresse for a second IM and Presence node, and paths to CA certificates on the EasyUC server for private certificates.
Kennzeichen in MicrosoftE-Mail, User Principal Name, Geschäftliche Telefonnummer (business phone), Mobiltelefon, Entra-Objekt-ID, Mitarbeiter-ID (employee ID), Lokaler Benutzername (on-premises user name) or a custom attribute.
Kennzeichen in CUCM / JabberCUCM Mail-ID, CUCM Benutzer-ID, CUCM Telefonnummer, CUCM Directory URI or CUCM Abteilung (department).
Groß- und Kleinschreibung unterscheidenCase sensitivity. Default: off. When switched on, the values must match exactly.
Manuelle ZuordnungenFixed pairs of Microsoft user ID and Cisco user ID. Each ID may occur only once.
Delete profileOnly for independent profiles. Deletes the profile and stops its synchronisation.

Check the result and narrow down errors

  • Success: the profile list shows Microsoft Graph · Ready, the Cisco test is green and the preview shows the expected number under Eindeutig.
  • Speichere das Profil vor dem Verbindungstest. and Speichere den Cisco-Zugang vor dem Verbindungstest. Tests always work with the stored credentials.
  • Wähle eine vorhandene Verbindung oder gib einen Verbindungsnamen und gültige HTTPS-Adressen ohne eingebettete Zugangsdaten ein. Addresses must begin with https:// and must not contain a user.
  • Die Prüfung ist unvollständig. Beachte die Hinweise; nicht geprüfte Benutzer gelten nicht als zugeordnet. One of the directories could not be read completely.
  • Mehrdeutig: the same value occurs for several users. Such matches are skipped. Change the field or map manually.
  • Für die Cisco-Einrichtung benötigst du die Presence-Sync-Berechtigung. ROLE_APP_PRESENCE_SYNC is missing.
  • Dieses Profil teilt seine Microsoft-Zugänge mit dem Teams SBC. Änderungen gelten für beide Bereiche und benötigen zusätzlich die Teams-Tenant-Bearbeitungsberechtigung. Changes apply to both areas and also need the Teams tenant edit permission.
  • Ein anderes aktives Presence-Profil verwendet bereits diese IM&P-Application-Session. Per IM and Presence application user only one active profile can publish. Use an application user of its own or deactivate the other profile.
  • If saving fails after the first partial step, the profile is kept. Add the missing details and save again. No second profile is created.

Related chapters