EasyUC
English
Aurora

Choose appearance

4.8.7

EasyUC for Microsoft Teams

Create and manage a Teams tenant

Connect a Microsoft Teams tenant to the SBC with its own hostname, TLS port and certificate.

EasyUC · Version 4.8.7

In EasyUC: EasyUC Teams → Teams → Teams Tenants → Add tenant

Images come from the EasyUC lab. Names and example values provide orientation. A different interface language is indicated beside the relevant image.

What it is for

A tenant in EasyUC stands for exactly one Microsoft Teams tenant, that is, one customer organisation in Microsoft 365. Each tenant gets its own public hostname, its own TLS port and its own certificate. This lets you connect several customers through the same SBC without their trunks touching each other.

The tenant page is the central place for everything else: certificate, Microsoft Graph access, sign-in to Teams PowerShell, trunk and voice routes, users, phones, number plan, call history, recordings and captures.

The hostname must belong to a domain that is verified in the customer’s Microsoft 365 tenant. Microsoft rejects a PSTN gateway under a foreign domain.

Prerequisites

  • Licence module teams. Without this module the EasyUC Teams workspace does not appear.
  • Role EasyUC Teams (ROLE_APP_TEAMS_WORKSPACE) with the sub-permissions TENANTS (ROLE_APP_TEAMS_TENANTS) to read and TENANTS bearbeiten (ROLE_APP_TEAMS_TENANTS_EDIT) to change.
  • The integrated SBC is enabled and has a public IP (chapter “Enable the Teams SBC and set the network details”).
  • A full hostname for the tenant, for example sbc.kunde.de, with a public DNS A record pointing to the public IP of the SBC.
  • The domain of the hostname is verified in the customer’s Microsoft 365 tenant. For sbc.kunde.de, kunde.de must be registered there.
  • The customer’s directory (tenant) ID from Microsoft Entra, as soon as you want to use Graph or the app sign-in.

Step by step: Create a tenant

  1. Select the EasyUC Teams workspace and open Teams → Teams Tenants.
  2. Click Add tenant. The New Teams tenant form opens.
  3. Under Customer name, enter a name, for example Muster GmbH.
  4. Under SBC hostname for this tenant, enter the full hostname, for example sbc.kunde.de. Below it, EasyUC shows which domain must be verified in the Teams tenant and which IP the A record must point to.
  5. Under Directory (tenant) ID, enter the GUID of the Microsoft tenant.
  6. Leave Route calls to empty. The field is no longer used for routing.
  7. Click Create. EasyUC assigns the next free TLS port and opens the list with the new tenant.
  8. Click the tenant’s row. The tenant page opens in the Settings section.
  9. Next, request the certificate (chapter “SBC certificate per tenant”).

Step by step: Change tenant settings

  1. Open Teams Tenants and click the tenant.
  2. Stay in the Settings section of the tenant bar on the left.
  3. Change Customer name, SBC hostname, Directory (tenant) ID or TLS port.
  4. Tick or untick Trunk active and Save the SIP flow of every call.
  5. Under Keep call history (days), enter a value from 1 to 365.
  6. Click Save.
  7. If you changed the hostname or the TLS port: request the certificate again and synchronise the trunk in Teams (Update routes).

Step by step: Connect further tenants or delete a tenant

  1. For another customer, repeat the creation with that customer’s hostname, for example sbc.kunde-b.de. The new tenant gets the next free TLS port.
  2. Open the additional TLS port in the firewall. The tenant list shows the port in the Hostname column after the colon.
  3. All tenants in the tenant bar takes you back to the list.
  4. To delete, click the bin icon at the end of the row in the list and confirm the prompt „Tenant … löschen? Trunk, Zertifikat und Mitschnitt werden entfernt.“
  5. Before deleting, remove the trunk in Microsoft Teams with Remove the trunk. Deleting in EasyUC does not clean up anything in Microsoft.

Fields and options

Field / actionMeaning and use
Customer nameDisplay name of the tenant in EasyUC. Mandatory.
SBC hostnameFull public name at which Microsoft reaches this tenant’s trunk. The certificate is issued for this name. A change requests a new certificate.
Directory (tenant) IDGUID of the Microsoft tenant. Optional when creating; required for Microsoft Graph, the app sign-in and the Teams sign-in at the attendant console.
TLS portSIP port of this tenant. EasyUC assigns it on creation. Each port is assigned only once.
Route calls toLegacy field. It is no longer used for routing. Which number leads to which script is set in the script.
Trunk activeWithout the tick the tenant is switched off. The list then shows disabled, calls do not arrive and no certificate is renewed automatically.
Save the SIP flow of every callStores every SIP message of a call, without OPTIONS. Each call can then be opened as a ladder diagram, live or afterwards. Default: on.
Keep call history (days)1 to 365, default 14. Calls and their SIP flow are deleted after this time.
Scripts over this trunkList of all scripts for which Reachable via MS Teams is switched on with this tenant, with number and status: Reachable, Script switched off, Number already used by another script or Number invalid. Clicking the row opens the script.
Tenant barSections of the tenant: Settings, Presence sync, Presence Live, Show calls, Call history, SIP log, Users, Phones, Number plan, Recordings, Captures.
HeaderShows hostname with port, certificate state, Last OPTIONS and running Calls. The buttons start the SIP trace, the network capture and call recording.

Check the result and narrow down errors

  • Success: the tenant is in the list with hostname and port. The Certificate and Trunk columns show the state, at first without a certificate and without OPTIONS.
  • “The integrated SBC is not enabled yet.” Click Set it up first and enable the SBC.
  • „Bitte den vollständigen Hostnamen des Tenants angeben, zum Beispiel sbc.kunde.de“ or „Der Hostname ist ungültig. Erwartet wird ein vollständiger Name wie sbc.kunde.de“. Enter the whole name, not a short label.
  • „Die Verzeichnis-ID (Tenant-ID) muss eine GUID sein.“ Copy the ID from the overview in Microsoft Entra. Do not confuse it with the application ID.
  • „Der TLS-Port … ist bereits vergeben.“ Choose another port.
  • „Der TLS-Port … ist intern belegt (…). Bitte einen anderen Port wählen, üblich ist 5061.“ The port belongs to an internal service.
  • „Die Aufbewahrung des Anrufverlaufs muss 1 bis 365 Tage betragen.“ Correct the value.
  • The tenant stays without a trunk as long as the certificate is missing. The SBC opens a tenant’s TLS port only when the public IP is set, the certificate is issued and the tenant is active.

Related chapters