BRKUCC-2480 - Jabber Deployment
BRKUCC-2480 - Jabber Deployment
BRKUCC-2480 - Jabber Deployment
Best Experience…
BRKUCC-2480
#clmel
Agenda
• Introduction
• Core Deployment
• Features
• Chat Features
• SSO
• What’s new in Cisco Jabber
Desktop
• What’s new in Cisco Jabber for
Mobile
• Solution Architecture Including
Mobile
• Distributing Cisco Jabber Mobile
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 3
Cisco Jabber – The Power to Collaborate
Rich, Real-time Collaboration with Cisco Jabber® Platform
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 4
On Premise Services
• Presence and IM services Federated
Organisation
Jabber
deployed used on premise model (Soft Phone Mode)
Expressway
Sync & C
authentication
Jabber Mobile
Jabber Desktop Jabber Desktop Jabber Desktop & Tablet TelePresence TelePresence
(Desk Phone mode) (Soft Phone Mode) (Soft Phone Mode) Endpoint Room
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 5
Deployment Flexibility
• Start with the features you need
Start Solution with… Start Solution with… Start Solution with…
Instant Voice Unified
Messaging & Video Comms
Jabber Full UC
IM and Media Termination
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 6
Begin Your Deployment Planning with
Directory and UC Infrastructure
Creating Jabber Users
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 8
Jabber Configuration – Configuration Sources
• During start-up Jabber clients will take
Service Profile Priority configuration from multiple sources
• Jabber builds a local configuration which is
IM&P SOAP populated from different sources
• Configuration sources have different
Jabber-config.xml priorities with Service profiles highest
• Operating configuration can made up from
Bootstrap/Local different configuration sources
• Configuration is created at parameter level
e.g. LDAP Host from Jabber-config.xml
Configuration LDAP user ID from Service profile
Operating LDAP password from Service
profile
Config
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
Creating Jabber Users
AADAMS@EXAMPLE.COM
Jabber ID or “JID”
• Consider your Jabber domain carefully – by default JIDs are formed based on
“CUCM UID” @ “XMPP domain”
• Jabber 10.6 introduces flexible JID formation
• Multi-modal communications address (Email, IM, Voice, Video & Federation)
• User created on UC Manager (can be synced from LDAP, AD Server)
• User is authenticated (can be authenticated from LDAP/AD/SSO iDP)
• Presence domain is configured on Presence server
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 10
Jabber Contact Sources
• Jabber utilises a directory service for a number of
purposes
– Search and add contacts
– Resolve contact information
– Resolve phone numbers to display name
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 11
Jabber Contact Sources WebEx Messenger
deployments use a
contact service
LDAP based contact Source (EDI or BDI)
provided by the
Active Directory, AD LDS, Open LDAP
Messenger cloud
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 12
Jabber Contact Sources
EDI : Enhanced Directory Integration (LDAP)
• On Premise Jabber for Windows by default uses auto-discovery for LDAP
directory access (EDI Mode)
• Workstation MUST be a member of a domain for auto discovery to work
• Jabber connects to a Global Catalog server in the current domain (windows
selects exact GC, so distributes load)
• Jabber uses encrypted authentication to directory based on current logged on
user (workstation)
• Ambiguous name resolution (ANR) is used for search, ANR is more efficient
and uses less server resources than other search methods
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 13
Jabber Contact Sources
EDI : Enhanced Directory Integration (LDAP)
3. Client authenticated
using existing
domain authentication
1. Workstation
discovered DC/GC
using DNS SRV
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 14
Jabber Contact Sources
BDI : Basic Directory Integration (LDAP)
On Premise Jabber for Mac must use a BDI
integration to the LDAP server for directory
integration
• BDI uses a common application username and
password to access the LDAP server which is
used Jabber
downloads
BDI configuration is obtained from the jabber- jabber-config.xml
Jabber connects
from CUCM
config.xml to LDAP server as
per BDI config in
BDI is also used for Jabber mobile clients jabber-config.xml
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 15
Jabber Contact Sources
UDS – User Data Services (Contact Service)
• UDS is an umbrella of web services
Directory provided by UC Manager.
Source
Sync CUCM • One of the services provided is a
Clusters directory service
• Jabber can utilise the UDS directory
service instead of an LDAP directory
service if desired
Resolve “ssmith@example.com” • When Jabber clients are connected
“Steve Smith”
“555-444-1012”
via Remote and Mobile Access, UDS
“(1)555-444-1012” directory service will be used by
Client resolves “+15554441012” default
contact lookups
against UDS • UDS can be enabled using the
jabber-config.xml file or via Service
Profile
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 16
Adding Users to UC Manager
Unified Communication Manager
Option 1 (recommended)
User User
Active
Data Data
Directory
(or supported
directory)
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 17
Syncing Users – Setting Directory URI
• When configuring the sync
agreement – Directory URI needs to
be mapped to an AD attribute
– mail
– msRTCSIP-primaryuseraddress
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
Jabber User Configuration – Service Profiles
• Services Profiles detail the
configuration and address of UC Service Profile IM&P
UC Service
services assigned CTI
UC Service
• Service Profiles are configured on Voicemail
CUCM in 9.x and later User UC Service
Conference
– configured on CUP in 8.6 deployments UC Service
Directory
XML File
• Service profiles can be used to IM&P
UC Service
Miscellaneous
• Assign device to the user and associate device to user
• Add user to appropriate permission groups
• Enable Mobility (e.g. Extend and Connect)
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 20
Syncing Users to IM and Presence
Enable users for IM & P
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 21
Flexible JID
Flexible Jabber ID (JID) Structure
Jabber User JID based on…. LDAP Sourced ….
Classic Configuration sAMAccountName
sAMAccountName[@xmpp domain]
or mail
Flexible JID Structure
DirectoryURI (user@domain.com)
or
msRTCSIP-primaryuseraddress
• Jabber 10.6 provides the administrator flexibility when defining user JID
• JID can be based on CUCM DirectoryURI which is synced from LDAP
• JID structure becomes independent of UserID (UID) for authentication
• Supported on Windows, Mac, IOS and Android
• Supported with LDAP (BDI/EDI) and UDS contact sources
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
Flexible Jabber ID (JID) Structure
EXAMPLE: UserID:smiller JID:sue.miller@example.com
UC Manager
LDAP
Directory
Settings
LDAP Sync
DB Sync AD
IM&P JID = URI:mail example.com
UID:sAMAccountname
CUCM URI:mail
Advanced Presence
Settings
Jabber-config.xml
Jabber Need to configure
client Jabber to use SIP URI
to resolve contacts!!!
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
Configuring Jabber for Flexible JID
• Jabber needs to be configured to use SIP URI to
resolve contacts when flexible JID is used
<Directory>
<UseSIPURIToResolveContacts>true</UseSIPURIToResolveContacts>
<SipUri>mail</SipUri>
<BDIUseSIPURIToResolveContacts>true</BDIUseSIPURIToResolveContact
s>
<BDISipUri>mail</BDISipUri>
</Directory>
<BDIUriPrefix>sip:</BDIUriPrefix>
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
Flexible Jabber ID (JID) Structure - Summary
• Provides Admin more flexibility over JID definition
• Multiple JID domains in the same deployment are supported
− first.last@domain1.com
− username@domain2.com
• Privacy settings for Multiple JID domains are not yet supported
• Simplifies Lync to Jabber Migration UserID management where userid not based
on sAMAccountName in Lync deployment.
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
Service Discovery
Service Discovery is for Cisco Jabber to…
Select… Subscribe to…
Operating Mode UC Services
Cloud or On-Premises
Determine…
Discover…
Operating
UC Services Domain
Location
Inside or Outside
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
Jabber Sends HTTP and DNS Queries
• Jabber sends all requests (HTTP request & DNS * CAS: Connect
queries) simultaneously Authentication Service
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
Jabber Establishes Services Domain
• Jabber needs to establish Services Domain name to send
Service Discovery queries
– Services Domain is usually the WebEx Messenger domain name
or UC Manager domain name
• Jabber can establish the Services Domain in a number of
ways
– UPN discovery (Jabber for Windows only)
– Enduser input
– Preconfigure (Bootstrapping/MSI transformation or URL
Configuration)
– jabber-config.xml
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 30
UPN Discovery
• Jabber for Windows will not prompt user to
enter login credentials until the Windows
machine is connected to a network
• Once a network connection becomes available
Jabber will initiate service discovery
• Jabber for Windows will attempt to use User
Principal Name (UPN) for service discovery
e.g. smiller@example.com
example.com is used as the Services Domain
(_cisco-uds._ecp.example.com etc)
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
Services Discovery Configuration Preconfigure
• Jabber for Windows can be preconfigured with Services Discovery
configuration via bootstrapping or MSI transformation
msiexec /i CiscoJabberSetup.msi SERVICES_DOMAIN=example.com
VOICE_SERVICES_DOMAIN=uc.example.com
msiexec /i CiscoJabberSetup.msi SERVICES_DOMAIN=example.com
EXCLUDED_SERVICES=WEBEX
• Jabber for Mac can be preconfigured with Services Domain via URL
Configuration
ciscojabber://provision?ServicesDomain=example.com&VoiceServicesDomain=uc.e
xample.com
ciscojabber://provision?ServicesDomain=example.com&ServiceDiscoveryExcluded
Services=WEBEX
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 33
Home Cluster Discovery smiller’s
homecluster is
Cluster 2
Cluster 2
DNS 4
3
1 ILS
Service
2
Cluster 1 Cluster 3
– DNS SRV returns a node in Cluster 1
– Jabber connects to node in Cluster 1 and asks for homecluster of “smiller”
– Cluster 1 queries other clusters for “smiller” home cluster via ILS Service and returns
Cluster 2 to Jabber
– Jabber connects to Cluster 2 for service
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 34
Single Sign On
Single Sign On
• Jabber 10.5 supports SAMLv2 based SSO
• Supported in cloud, on premise and hybrid deployments
• Supported with UC Manager 10.5 +
• Jabber users need to authenticate once with an Identity
Provider (IdP) to gain authorisation and access to
provisioned services
• Users no longer required to provide credentials multiple
times for UC services
• Supported IdPs’
− Ping Federate
− Microsoft AD Federation Services (ADFS)
− OpenAM
technology
• The Browser abstracts the client from details of:
Control shares Yes Yes NO NO
− IdP interaction and re-directs cookies with
native OS
browser
− IdP Login Screen
− Password reset mechanism
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
SSO Login Flow – Embedded Browser
Home UCM
HTTP Request to Authorisation Cluster
CAS URL for request
example.com Messenger
Connect to
Service services
Redirect cookie
example.com is
to IdP Authorise
not WebEx
domain
UCM UDS
address Request
Authentication
form Embedded browser
Home
Jabber initiates service cluster
DNS SRV
discovery based on UPN address Authentication
lookup2 Authentication IdP Cookie
(cholland@example.com) form
_cisco-uds Look for home UCM
_cuplogin cholland@example.co
_collab-edge Central UCM
m UDS
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
SSO Login - Kerberos
• Authentication based on login to a Windows domain
− Jabber will automatically sign into services based on authentication between the OS
and the IDP
• Kerberos based
authentication
supported with
Jabber for
Windows and Mac
1
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
Configure SSO for Jabber
1. Get Metadata from UC Services
DMZ
Expressway-C Expressway-E
Internet
Home Coffee
Office Shop
• A Video Desktop Share captures the desktop and sends the share as a
video stream
– Video Desktop Share requires an active softphone mode call
– Video Desktop Share is enabled by default and can be disabled using the
jabber-config.xml or the SIP profile
– Interoperable with Jabber, TelePresence and Video Bridges (TPS)
• IM Only Screen Share is available in Jabber for Windows 10.5 +
– No active call required
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
IM Only Screen Share
• Screen share from an IM session
– No requirement for active call
• Support for multiparty screen share – up to
1 + 5 participants
• Support for Remote Desktop Control
• Independent of telephony mode
Screen share
– Softphone mode and deskphone mode button
supported
• Protocols & Port Numbers
– IM Screen share capabilities negotiated through
xmpp session
– IM Screen share media selects a random TCP Recipient can accept or
port ranging from 49152 to 65535 decline the share invitation
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
Which Share is Initiated?
• From an IM Session with another Jabber for Windows user: Desktop Share Priority
• From an IM session with a Jabber for Mac user IM Only Desktop Share
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
Remote Desktop Control
• IM Only desktop share recipients can request
to take control of desktop share initiators
remote desktop
• Initiator is prompted to accept the remote
control request
• Share recipient can release control
• Initiator can revoke control at any time
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
Hunt Groups and Pickup
Hunt Group
• “Hunt Groups enable incoming calls to be
directed to a group of users”
• Supported on Jabber for Windows
(softphone mode)
• New tab to access Hunt Group Log in/Out
checkbox
• Enabled by a jabber-config key
<Options>
<EnableHuntGroup>True</EnableHuntGroup> Logged into Hunt Groups
</Options>
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
Call Pickup / Group Pickup / Directed Group Pickup
• Call Pickup allows users to pick up
incoming calls within their own group
• Group Pickup allows users to pick up
an incoming call to another
associated group
• Directed Call Pickup allows users to
pick up incoming calls to another
group by way of group DN
• Utilises same tab as Hunt Group
<Options>
• Hunt Group is not a requirement <EnableCallPickup>True</EnableCallPickup>
<EnableGroupCallPickup>True</EnableGroupCallPickup>
• Enabled by a new jabber-config key <EnableOtherGroupPickup>True</EnableOtherGroupPickup>
</Options>
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
Pickup a Call
Call Pickup
Pickup a call to a user in the same group
Click “Pickup” on toast or Hub Tab
Group Pickup / Other Pickup
Pickup a call to a user in another associated
group
Call Pickup Group Number must be
associated with your Call Pickup
Group on CUCM
Click “Other Pickup” on the Hub Tab
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
Persistent Chat Rooms Architecture
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
File Transfer Enhancements
• Jabber 10.6 introduces a new option for file transfer
• New architecture based on IM & P 10.5.2 Managed File Transfer feature
– File transfers are stored to external file server
– Audit logs written to external database
– Feature supported on Jabber for Windows, Mac, Android and IOS
• Feature includes the following
– Group Chat support of File Transfer
– Persistent Chat Room support of File Transfer
– Support of Compliance & Policy control of File Transfer
– Admin control of maximum file transfer size
• In pre IM & P 10.5.2 environments, file transfer will revert to point to point model
(Jabber for Windows)
• Point to Point based file transfer is available for mixed deployments
– Can be configured on IM & Presence
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
File Transfer Architecture
SSH
External
Unified Database External
CM Cisco IM &
Server Presence File Server
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
What’s New in Cisco Jabber Desktop
Save Chat to Outlook
• Jabber for Windows 10.6 allows chat history to be automatically stored in a
Microsoft Exchange folder which can be viewed through Outlook
– Jabber connects to Exchange via Exchange Web Services (EWS)
• Supported with Exchange 2010 and 2013
• Jabber can discover Exchange server via
– Autodiscovery based on Services Domain
– jabber-config.xml file
– Manual entry (enduser)
• Jabber can authenticate with Exchange using
– OS level SSO
– Credential Syncing with UC Service
– Manual authentication (enduser)
• Feature can be enabled/disabled by an administrator or enduser
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
Location: Display Current Location
• User can assign a Location name,
address & time zone for each
network* location detected by
Jabber to show contacts where
they are working.
• Feature can be disabled by both
admin and user. User can choose
which locations to publish
• Most recent active client will be the
published location
• Mobile Jabber location will be
@mobile, not geolocation
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
Jabber Release 10.6
Chat & Presence Features Telephony Features
Alert when available Calls – Do Not Disturb
Locations Call notifications on other device
Print Chat Early Mute – mute before answer
Save Chat to File Call Statistics Menu item
Save Chat to Outlook Audio Device selection
Jabber for Conversation Tab reordering Ring on all devices
Conversation Tab switching shortcut (CTRL –TAB)
Windows Chat Security Labels [XEP-258]
Group Chats – remove participants
Chat Room Passwords
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public
What’s New in Cisco Jabber for Mobile
What’s New in Jabber 10.5 for Mobile
• SAMLv2 Single Sign-On (SSO)
• Phone-only mode
• More Android smartphones &
tablets
• HD quality video on iPhone & iPad
• Answer hunt group calls
• Visual design refresh
• Reset Jabber
• Telemetry service support
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 62
What’s New in Jabber 10.6 for Mobile Available
Today
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 63
Solution Architecture Including Mobile
Cisco Jabber On-Premises Deployment
Home/public Expressway-E
Expressway-C
802.11 Wi-Fi Directory
Internet Server
Unified IP
Mobile Phones
Data
Network DX80
Unified CM Cluster
Cisco (UDS)
3G/4G ASA IM and
or LTE Presence
Enterprise
802.11 Wi-Fi MX700
Mobile WebEx
Cisco PSTN Unity
Meeting
Voice Cisco Connection
Jabber Server
Jabber
Network
3G/4G
or LTE Enterprise Network
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 65
Cisco Jabber Hybrid Deployment
Home/public Expressway-E
Expressway-C
802.11 Wi-Fi Directory
Internet Server
Unified IP
Mobile Phones
Data
Network DX80
Unified CM Cluster
Cisco (UDS)
3G/4G ASA
or LTE
Enterprise
802.11 Wi-Fi MX700
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 66
Device Type in Unified CM
iPad &
Android Smartphone &
Android Tablet w/o
Platform iPhone Tablet w/ Cellular
Cellular Voice
Voice Capability
Capability
Product Type Cisco Jabber for Tablet Cisco Dual Mode for Cisco Dual Mode for
(Device Type) iPhone Android
A COP file is required for A COP file is required for A COP file is required for all
COP File all supported versions of all supported versions of supported versions of
Unified CM Unified CM Unified CM
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 67
File Transfer in Cisco Jabber 10.6 for Mobile
• Users can share photos, files & screen captures
• In a 1:1 chat or a group chat*
• Integration with 3rd party cloud file storages
• Save received files on mobile devices
– Android – received files in SD card
– iOS – sent/received files in Jabber app folder
• File transfer events can be logged for compliance purpose*
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 68
Distributing Cisco Jabber for Mobile
Where to Find the Latest FCS Software
• Cisco Jabber is a free download
• Recommended that end users
download/upgrade directly from App
Store or Google Play Store
• 3rd party MDM/MAM* solution may be
used to wrap/distribute Jabber within the
organisation
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 70
Community Based App Wrapping Support
• Looking to building out an on-line community in
Customer Connection Program (CCP) to support
for Jabber wrapping
• Distribute software outside of App Store while
staying in Apple’s developer license agreement
• For customers & partners (invitation only)
• Starting with several leading MAM/MDM makers
but plan to expand to cover more vendors
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 71
Key Takeaways
• Cisco Jabber can provide the core UC features
with video on most commonly used mobile
devices
• Cisco Jabber can be deployed either on-premise
or in the cloud
• Cisco Jabber is flexible, and can operate in three
different modes: full UC, phone-only & IM-only
• User Experience is the main focus for Cisco
Jabber. Delighting the end-user!
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 72
Call to Action
• Visit the World of Solutions for
– Cisco Campus – Collaboration area
• Meet the Expert
– Paul is available this week for meet the expert
• www.linkedin.com/in/odwyerpaul
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public 73
Q&A
Complete Your Online Session Evaluation
Give us your feedback and receive a
Cisco Live 2015 T-Shirt!
Complete your Overall Event Survey and 5 Session
Evaluations.
BRKUCC-2480 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Public