Forum Discussion
Polycom VVX 600 and MFA
Actually, it turns out I found the steps that Scott mentioned at the following article -- http://blog.schertz.name/2016/12/polycom-ucs-5-5-for-vvx-phones/.
It looks like the new 5.5.1 software has a 'Web Sign-In' option that Scott mentioned. On my phone I chose 'Sign-In' and was given the option for 'Web Sign-in'. It stepped me through a process with a url and access code that successfully tied the phone to my account.
Now my Polycom phone is working with my Office 365 tenant with MFA enabled.
Brad, the Web Sign-In method is currently still only available for use with Skype for Business Online accounts, not SfB Server accounts. Microsoft is working on a solution for this though, so hang tight.
Jeff, Web Sign-in is also the _only_ option currently available for SFB Online with MFA enabled. This is classified information, apparently, because nowhere in process of enabling (and enforcing) MFA for our users did I run into a warning that would have alerted me of this. But just the other day I found this recently updated document that clarifies it (scroll down to the table of sign-in options for various deployment scenarios):
https://docs.microsoft.com/en-us/skypeforbusiness/what-is-phone-system-in-office-365/getting-phones-for-skype-for-business-online/deploying-skype-for-business-online-phones
Initiating a web sign-in from VVX-601 worked perfectly for me thanks.
Is this still working for you? I am now getting an error "network is down unable to get url and pair code". I am certain that the network is not down as the username/password authentication still does not work with MFA enabled (using app password) as demonstrated by various errors that confirm connectivity.
Thanks for any info!
It works for me. I had to pin my firmware to 5.7.1.3782 and disallow auto-upgrades.
I learned that this needs to be configured on the Skype side, not the phone. Here the PS script that I use:
Set-ExecutionPolicy RemoteSigned
Import-Module LyncOnlineConnector
$session = New-CsOnlineSession
Import-PSSession $session
Get-Module
Get-CsIPPhonePolicy
Set-CsIPPhonePolicy -EnableDeviceUpdate $false
Get-CsIPPhonePolicy
Set-CsIPPhonePolicy -EnableBetterTogetherOverEthernet $true
Get-CsIPPhonePolicy
Set-CsIPPhonePolicy -BetterTogetherOverEthernetPairingMode Auto
Get-CsIPPhonePolicy
Set-CsIPPhonePolicy -UserDialTimeoutMS 10000Also great - the ability to change the token lifetime to the max allowed (was it 30 or 60 days?), it has become much less bothersome.
Not today, sadly. Azure MFA out of service and we are completely crippled, not just the phones.
Ouch. It must be Plantronics fault ;)
And by the way, thank you, Jeff, for all the great information about SFB and the Polycom phones that you have assembled and curated over the years. Things would have been much more difficult for many of us without your blog.
