Forum Discussion
Polycom VVX 600 and MFA
Actually, it turns out I found the steps that Scott mentioned at the following article -- http://blog.schertz.name/2016/12/polycom-ucs-5-5-for-vvx-phones/.
It looks like the new 5.5.1 software has a 'Web Sign-In' option that Scott mentioned. On my phone I chose 'Sign-In' and was given the option for 'Web Sign-in'. It stepped me through a process with a url and access code that successfully tied the phone to my account.
Now my Polycom phone is working with my Office 365 tenant with MFA enabled.
Jeff, Web Sign-in is also the _only_ option currently available for SFB Online with MFA enabled. This is classified information, apparently, because nowhere in process of enabling (and enforcing) MFA for our users did I run into a warning that would have alerted me of this. But just the other day I found this recently updated document that clarifies it (scroll down to the table of sign-in options for various deployment scenarios):
https://docs.microsoft.com/en-us/skypeforbusiness/what-is-phone-system-in-office-365/getting-phones-for-skype-for-business-online/deploying-skype-for-business-online-phones
Initiating a web sign-in from VVX-601 worked perfectly for me thanks.
Is this still working for you? I am now getting an error "network is down unable to get url and pair code". I am certain that the network is not down as the username/password authentication still does not work with MFA enabled (using app password) as demonstrated by various errors that confirm connectivity.
Thanks for any info!
It works for me. I had to pin my firmware to 5.7.1.3782 and disallow auto-upgrades.
I learned that this needs to be configured on the Skype side, not the phone. Here the PS script that I use:
Set-ExecutionPolicy RemoteSigned
Import-Module LyncOnlineConnector
$session = New-CsOnlineSession
Import-PSSession $session
Get-Module
Get-CsIPPhonePolicy
Set-CsIPPhonePolicy -EnableDeviceUpdate $false
Get-CsIPPhonePolicy
Set-CsIPPhonePolicy -EnableBetterTogetherOverEthernet $true
Get-CsIPPhonePolicy
Set-CsIPPhonePolicy -BetterTogetherOverEthernetPairingMode Auto
Get-CsIPPhonePolicy
Set-CsIPPhonePolicy -UserDialTimeoutMS 10000Also great - the ability to change the token lifetime to the max allowed (was it 30 or 60 days?), it has become much less bothersome.
Christian Donner We are also looking out how to expand the token lifetime. Our users are getting signed out every few days. Can you provide any details on how you achieved this?
Thanks!
Aside from some occasional requests by SfB to re-authenticate, the integration with my VVX 601 on my MFA enabled O365 account is stable. Contact syncing is my problem.
aafar wrote:Is this still working for you? I am now getting an error "network is down unable to get url and pair code". I am certain that the network is not down as the username/password authentication still does not work with MFA enabled (using app password) as demonstrated by various errors that confirm connectivity.
Thanks for any info!
, argh.
Not today, sadly. Azure MFA out of service and we are completely crippled, not just the phones.
Ouch. It must be Plantronics fault ;)
