SOLVED
Home

Polycom VVX 600 and MFA

%3CLINGO-SUB%20id%3D%22lingo-sub-36913%22%20slang%3D%22en-US%22%3EPolycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-36913%22%20slang%3D%22en-US%22%3E%3CP%3EHas%20anyone%20had%20any%20luck%20with%20the%20Polycom%20VVX%20600%20and%20signing%20into%20S4B%20when%20you%20have%20MFA%20enabled%20on%20your%20account%3F%20%26nbsp%3BOr%20for%20that%20matter%20any%20polycom%20device%3F%20%26nbsp%3BI've%20tried%20app%20passwords%20and%20those%20don't%20seem%20to%20work%20either.%20%26nbsp%3BI%20haven't%20seen%20any%20documentaiton%20anywhere%20if%20this%20is%20supported%20or%20not%2C%20so%20just%20curious%20if%20anyone%20has%20any%20inforamtion%20about%20it%20and%20if%20it's%20not%20supported%2C%20when%20it%20might%20be.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-36913%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EDevices%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-334819%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334819%22%20slang%3D%22en-US%22%3E%3CP%3EIt%20works%20for%20me.%20I%20had%20to%20pin%20my%20firmware%20to%26nbsp%3B%3CSPAN%3E5.7.1.3782%20and%20disallow%20auto-upgrades.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EI%20learned%20that%20this%20needs%20to%20be%20configured%20on%20the%20Skype%20side%2C%20not%20the%20phone.%20Here%20the%20PS%20script%20that%20I%20use%3A%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3ESet-ExecutionPolicy%20RemoteSigned%3CBR%20%2F%3EImport-Module%20LyncOnlineConnector%3CBR%20%2F%3E%24session%20%3D%20New-CsOnlineSession%3CBR%20%2F%3EImport-PSSession%20%24session%3CBR%20%2F%3EGet-Module%3CBR%20%2F%3EGet-CsIPPhonePolicy%3CBR%20%2F%3ESet-CsIPPhonePolicy%20-EnableDeviceUpdate%20%24false%3CBR%20%2F%3EGet-CsIPPhonePolicy%3CBR%20%2F%3ESet-CsIPPhonePolicy%20-EnableBetterTogetherOverEthernet%20%24true%3CBR%20%2F%3EGet-CsIPPhonePolicy%3CBR%20%2F%3ESet-CsIPPhonePolicy%20-BetterTogetherOverEthernetPairingMode%20Auto%3CBR%20%2F%3EGet-CsIPPhonePolicy%3CBR%20%2F%3ESet-CsIPPhonePolicy%20-UserDialTimeoutMS%2010000%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EAlso%20great%20-%20the%20ability%20to%20change%20the%20token%20lifetime%20to%20the%20max%20allowed%20(was%20it%2030%20or%2060%20days%3F)%2C%20it%20has%20become%20much%20less%20bothersome.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-334762%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334762%22%20slang%3D%22en-US%22%3E%3CP%3EAside%20from%20some%20occasional%20requests%20by%20SfB%20to%20re-authenticate%2C%20the%20integration%20with%20my%20VVX%20601%20on%20my%20MFA%20enabled%20O365%20account%20is%20stable.%26nbsp%3B%20Contact%20syncing%20is%20my%20problem.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F103556%22%20target%3D%22_blank%22%3E%40Andrew%20Farren%3C%2FA%3E%26nbsp%3Bwrote%3A%3CBR%20%2F%3E%3CP%3EIs%20this%20still%20working%20for%20you%3F%20I%20am%20now%20getting%20an%20error%20%22network%20is%20down%20unable%20to%20get%20url%20and%20pair%20code%22.%20I%20am%20certain%20that%20the%20network%20is%20not%20down%20as%20the%20username%2Fpassword%20authentication%20still%20does%20not%20work%20with%20MFA%20enabled%20(using%20app%20password)%20as%20demonstrated%20by%20various%20errors%20that%20confirm%20connectivity.%3C%2FP%3E%3CP%3EThanks%20for%20any%20info!%3C%2FP%3E%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3CP%3E%3CBR%20%2F%3E%2C%20argh.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-334490%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334490%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20this%20still%20working%20for%20you%3F%20I%20am%20now%20getting%20an%20error%20%22network%20is%20down%20unable%20to%20get%20url%20and%20pair%20code%22.%20I%20am%20certain%20that%20the%20network%20is%20not%20down%20as%20the%20username%2Fpassword%20authentication%20still%20does%20not%20work%20with%20MFA%20enabled%20(using%20app%20password)%20as%20demonstrated%20by%20various%20errors%20that%20confirm%20connectivity.%3C%2FP%3E%3CP%3EThanks%20for%20any%20info!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-288994%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-288994%22%20slang%3D%22en-US%22%3E%3CP%3EOuch.%26nbsp%3B%20It%20must%20be%20Plantronics%20fault%20%3B)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-288894%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-288894%22%20slang%3D%22en-US%22%3E%3CP%3ENot%20today%2C%20sadly.%20Azure%20MFA%20out%20of%20service%20and%20we%20are%20completely%20crippled%2C%20not%20just%20the%20phones.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-288356%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-288356%22%20slang%3D%22en-US%22%3E%3CP%3EInitiating%20a%20web%20sign-in%20from%20VVX-601%20worked%20perfectly%20for%20me%20thanks.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-278431%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-278431%22%20slang%3D%22en-US%22%3E%3CP%3EAnd%20by%20the%20way%2C%20thank%20you%2C%20Jeff%2C%20for%20all%20the%20great%20information%20about%20SFB%20and%20the%20Polycom%20phones%20that%20you%20have%20assembled%20and%20curated%20over%20the%20years.%20Things%20would%20have%20been%20much%20more%20difficult%20for%20many%20of%20us%20without%20your%20blog.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-278421%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-278421%22%20slang%3D%22en-US%22%3E%3CP%3EJeff%2C%20Web%20Sign-in%20is%20also%20the%20_only_%20option%20currently%20available%20for%20SFB%20Online%20with%20MFA%20enabled.%20This%20is%20classified%20information%2C%20apparently%2C%20because%20nowhere%20in%20process%20of%20enabling%20(and%20enforcing)%20MFA%20for%20our%20users%20did%20I%20run%20into%20a%20warning%20that%20would%20have%20alerted%20me%20of%20this.%20But%20just%20the%20other%20day%20I%20found%20this%20recently%20updated%20document%20that%20clarifies%20it%26nbsp%3B%20(scroll%20down%20to%20the%20table%20of%20sign-in%20options%20for%20various%20deployment%20scenarios)%3A%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fskypeforbusiness%2Fwhat-is-phone-system-in-office-365%2Fgetting-phones-for-skype-for-business-online%2Fdeploying-skype-for-business-online-phones%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fskypeforbusiness%2Fwhat-is-phone-system-in-office-365%2Fgetting-phones-for-skype-for-business-online%2Fdeploying-skype-for-business-online-phones%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-278305%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-278305%22%20slang%3D%22en-US%22%3EYes%20Brad%2C%20no%20on-prem%20server%20-%20for%20better%20or%20worse%20we've%20gone%20'full%20cloud'.%20We%20moved%20offices%20recently%20and%20it%20seemed%20like%20a%20good%20point%20at%20which%20to%20retire%20our%2016%20yr%20old%20PBX%20(and%20remove%20another%20bit%20of%20kit%20from%20the%20comms%20room).%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-278248%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-278248%22%20slang%3D%22en-US%22%3E%3CP%3EBrad%2C%20the%20Web%20Sign-In%20method%20is%20currently%20still%20only%26nbsp%3Bavailable%20for%20use%20with%20Skype%20for%20Business%20Online%20accounts%2C%20not%20SfB%20Server%20accounts.%26nbsp%3B%26nbsp%3BMicrosoft%20is%20working%20on%20a%20solution%20for%20this%20though%2C%20so%20hang%20tight.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-278217%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-278217%22%20slang%3D%22en-US%22%3E%3CP%3EJames%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EVery%20exciting%20to%20hear%20you%20got%20it%20working.%26nbsp%3B%20Are%20you%20by%20chance%20using%20a%20SfB%20Online%26nbsp%3Baccount%20or%20do%20you%20host%20Skype%20yourselves%20locally%3F%26nbsp%3B%20We%20host%20our%20own%20SfB%20server%20and%20I%20get%20the%26nbsp%3B%22failed%20to%20fetch%20user%20certificate%22%20error%20when%20attempting%20to%20sign-in%20using%20the%20web%20sign-in%20method.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks!%3C%2FP%3E%3CP%3E-Brad%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-277830%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-277830%22%20slang%3D%22en-US%22%3EHi%20Christian%2C%3CBR%20%2F%3E%3CBR%20%2F%3EAfter%20our%20pilot%20earlier%20in%20the%20year%20we%20rolled%20it%20out%20to%20all%20our%20non%20mobile%20users%20(x80).%20Setup%20did%20take%20a%20lot%20of%20work%20to%20get%20my%20head%20round%2C%20but%20once%20we%20had%20the%20ftp%20server%20running%2C%20the%20right%20network%20settings%20in%20place%20and%20the%20handset%20config%20files%20set%20the%20way%20we%20wanted%2C%20they've%20been%20working%20well%20for%20us.%3CBR%20%2F%3E%3CBR%20%2F%3EWe%20also%20use%20MFA%20and%20I%20do%20experience%20the%20very%20occasional%2C%20%22failed%20to%20fetch%20user%20certificate%22%20error%2C%20but%20then%20next%20time%20round%20it%20will%20log%20straight%20in%20just%20fine%20(always%20using%20Web%20Sign-in)%20-%20not%20sure%20why%20(might%20be%20after%20disabling%20%2F%20re-enabling%20MFA%20on%20my%20account%20which%20I've%20had%20to%20do%20a%20couple%20of%20times%3F).%3CBR%20%2F%3E%3CBR%20%2F%3EWe%20are%20currently%20on%20software%20version%3A%205.8.1.6389.%20We%20needed%20to%20disable%20the%20auto-update%20feature%20though%20-%20for%20some%20reason%20the%20MS%20version%20that%20gets%20pulled%20down%20is%20a%20fair%20few%20versions%20behind%20the%20latest%20version%20on%20Polycom%20website%2C%20which%20confused%20me%20for%20a%20bit.%20In%20summary%20I%20do%20have%20a%20few%20more%20grey%20hairs%20from%20this%20but%20on%20reflection%20I%20would%20call%20it%20a%20success%20for%20our%20org.%20Now%20if%20only%20the%20pricing%20was%20a%20bit%20more%20reasonable...%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-277697%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-277697%22%20slang%3D%22en-US%22%3E%3CP%3EIt%20is%202%20years%20later%20and%20there%20is%20still%20no%20workable%20solution%26nbsp%3Bfor%20these%20phones.%20It%20is%20quite%20unbelievable%20when%20you%20think%20that%20this%20is%20(or%20once%20was)%20such%20a%20strategic%20collaboration%20for%20MS%20and%20Polycom%2C%20and%20that%20they%20have%20not%20managed%20to%20work%20something%20out.%20I%20am%20the%20only%20one%20in%20my%20office%20who%20puts%20up%20with%20checking%20my%20phone%20in%20the%20morning%20and%20signing%20in%20again%20if%20needed%2C%20so%20that%20I%20can%20make%20and%20receive%20calls%20during%20the%20day.%20Everybody%20else%20resorted%20to%20using%20their%20personal%20cell%20phones.%26nbsp%3BBut%20we%20are%20paying%20through%20the%20nose%20for%20the%20E5%26nbsp%3Blicenses%20and%20calling%20plans.%3CBR%20%2F%3ENow%2C%20over%20the%20past%20couple%20of%20months%2C%20things%20seem%20to%20have%20taken%20a%20turn%20for%20the%20worse.%20The%20latest%20firmware%20that%20MS%20is%20pushing%20down%20(%3CSPAN%3E5.8.0.12848)%26nbsp%3B%3C%2FSPAN%3Ebroke%20our%20ability%20to%20authenticate%20with%20the%20phones%20(%22failed%20to%20fetch%20user%20certificate%22).%20I%20suspect%20that%20this%20has%20to%20do%20with%20MS%20adding%20support%20for%20Teams%20and%20that%20this%20introduced%20a%20glitch.%20I%20now%20have%20to%20pin%20my%20firmware%20to%20the%20last%20one%20where%20web%20sign-in%20worked%2C%20which%20means%20that%20even%20if%20there%20ever%20is%20a%20fix%20for%20allowing%20MFA%20with%20app%20passwords%20on%20the%20device%2C%20I%20will%20not%20get%20it%20because%20I%20cannot%20allow%20the%20phones%20to%20upgrade%20the%20firmware%20.....%26nbsp%3B%3CBR%20%2F%3EIs%20there%20anybody%20out%20there%20who%20deployed%20SFB%20Online%20with%20Lync%20handsets%20and%20can%20claim%20that%20it%20was%20a%20success%3F%20Or%20are%20the%20people%20in%20this%20thread%20the%20last%20few%20who%20are%20trying%20to%20make%20it%20work%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-186770%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-186770%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20James%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20for%20this%20update%2C%20my%20handset%20may%20be%20a%20software%20version%20or%20two%20out%20of%20date%2C%20so%20i%20will%20update%20to%20the%20latest%20version%20and%20post%20back%20how%20i%20get%20on%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ethanks%20again%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENeil%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-186713%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-186713%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Neil%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAfter%20Jeff's%20steer%26nbsp%3Bto%20use%26nbsp%3Bthe%20web%20sign%20in%20method%20things%20have%20been%20ok%20for%20me.%20To%20be%20fair%20we're%20only%20trialling%20this%20with%20around%20a%20dozen%20users.%20But%20with%20them%20all%20on%20the%20most%20recent%20software%20(5.7.1.2205%20as%20of%20this%20post)%26nbsp%3Bwe%20haven't%20been%20experiencing%20any%26nbsp%3Bsign-outs.%20In%20fact%20I've%20been%20impressed%20(and%20very%20happy)%20at%20being%20able%20to%20unplug%20my%20phone%2C%26nbsp%3Bhot%20desk%20to%20another%26nbsp%3Bpart%20of%20the%20office%2C%20plug%20my%20phone%20in%20there%20and%20then%20have%20it%20come%20back%20up%20with%20my%20account%20signed%20in%20automatically%20no%20questions%20asked%20-%20perfect.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWill%20post%20again%20if%26nbsp%3Bthings%20go%20off%20the%20rails%2C%20but%26nbsp%3Bso%20far%20so%20good%20here.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBest%20regards%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EJames%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-186387%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-186387%22%20slang%3D%22en-US%22%3E%3CP%3EHI%20Neil%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EStill%20having%20the%20same%20issues%20here%20all%20these%20months%20later.%20Still%20can%20only%20sign%20in%20via%20web%20sign-in%20(cannot%20use%20userid%2Fpassword%20even%20with%20APP%20password%20for%20MFA).%20And%20still%20get%20auto-signed%20out%20after%20a%20couple%20of%20days%20despite%20turning%20off%20every%20available%20%22sleep%22%20option%20I%20could%20find.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFrustrating...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-185953%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-185953%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20everyone%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20having%20the%20same%20difficulty%20as%20others%20with%20using%20the%20Web%20sign%20in.%20I%20get%20it%20signed%20in%20ok%2C%20but%20then%20after%20a%20few%20days%20it%20signs%20itself%20out%20and%20then%20i%20have%20to%20go%20through%20the%20web%20sign%20in%20process%20again.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnyone%20had%20any%20updates%20on%20this%20at%20all%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ethanks%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENeil%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-168891%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-168891%22%20slang%3D%22en-US%22%3E%3CP%3ETo%20clarify%20here%3A%20the%20VVX%20platform%20does%20not%20yet%20support%20Multi%20Factor%20Authentication%20(MFA)%20for%20any%20scenario%20other%20than%20the%20new%20%3CSTRONG%3EWeb-Sign%20In%3C%2FSTRONG%3E%20method.%26nbsp%3B%20So%20while%20core%20MFA%20support%20has%20been%20included%20in%20the%20UCS%20firmware%20it's%20only%26nbsp%3Bcurrently%20leveraged%26nbsp%3Bfor%20using%20the%20Web%20Sign-In%20process%20with%20SfB%20Online%26nbsp%3Baccounts.%26nbsp%3B%26nbsp%3BIf%20requiring%20MFA%20for%20authentication%20for%20on-premises%20SfB%20Server-homed%20accounts%20the%20phone%26nbsp%3Bwill%20most%20likely%20not%20sign-in.%26nbsp%3B%20NTLM%2BTLS-DSK%20is%20still%20required%20for%20the%20phones%20today.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-168623%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-168623%22%20slang%3D%22en-US%22%3EThanks%20for%20this%20thread%20Ben.%20We%20have%20gotten%20some%20VVX%20401%20units%20in%20for%20some%20of%20our%20Skype%20PBX%20users%20(full%20cloud)%20to%20trial.%20I%20was%20also%20having%20fun%20and%20games%20signing%20in%20with%20my%20MFA%20enabled%20account.%20The%20next%20day%20all%20was%20well%20when%20I%20entered%20the%20App%20Password%2C%20scratching%20my%20head%20my%20colleague%20mentioned%20that%20it%20can%20take%20a%20while%20for%20newly%20created%20App%20Passwords%20to%20start%20working%20-%20Doh!!.%20Thought%20I'd%20post%20here%20in%20case%20this%20intel%20might%20be%20of%20use%20to%20others.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-138140%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-138140%22%20slang%3D%22en-US%22%3E%3CP%3EI%20went%20through%20a%20multi-day%20torture%20session%20with%20support%20trying%20to%20use%20regular%20username%2Fpassword%20sign%20in%20on%20the%20phone%20instead%20of%20the%20web%20sign-in%20hoping%20that%20would%20fix%20the%20login%20timeout%20issue.%20I%20set%20up%20an%20app%20password%20for%20the%20phone%2C%20but%20it%20won't%20authenticate%20with%20that%20(bad%20username%2Fpassword%20errors)%20and%20support%20finally%20told%20me%20that%20it's%20a%20problem%20on%20Polycom's%20side%20of%20things...I%20usually%20give%20up%20when%20I%20reach%20the%20%22it's%20someone%20else's%20fault%22%20section%20of%20the%20MSFT%20support%20workflow%20chart%2C%20so%20I%20think%20it%20may%20be%20a%20bust.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EJust%20happy%20that%20I'm%20doing%20this%20testing%20before%20committing%20to%20rolling%20this%20service%20out%20to%20everyone%20here!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThx%20for%20the%20reply.%20Good%20luck!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-138139%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-138139%22%20slang%3D%22en-US%22%3E%3CP%3EI've%20also%20started%20having%20all%20kinds%20of%20issues%20with%20this.%26nbsp%3B%20Some%20with%20signing%20in%2C%20if%2Fonce%20I%20do%20manage%20to%20get%20signed%20in%2C%20I'm%20usually%20signed%20out%20overnight%20as%20well.%26nbsp%3B%20What%20started%20as%20a%20great%20experience%20has%20definitely%20gone%20hill%20quickly%2C%20to%20the%20point%20I%20rarely%20use%20the%20phone%20anymore%20b%2Fc%20I%20have%20to%20sign-in%20every%20time%20I%20want%20to%20make%20a%20call%20(and%20rarely%20get%20calls%20b%2Fc%20I'm%20rarely%20signed%20in).%26nbsp%3B%20Been%20using%20the%20desktop%20client%20most%20of%20the%20time%20now%20unfortunately.%26nbsp%3B%20Hopefully%20they%20can%20fix%20this...%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBen%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-138138%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-138138%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20MFA%20enabled%20and%20can%20sign%20in%20using%20the%20web%20sign-in%20method%20but%20am%20having%20the%20same%20issue%20with%20the%20phone%20logging%20out%20overnight.%20It's%20a%20huge%20pain%20to%20reach%20for%20the%20phone%20and%20see%20it%20is%20logged%20out...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20tried%20fiddling%20with%20all%20of%20the%20available%20%22stay%20signed%20in%22%20options%20I%20could%20find%20in%20the%20phone%20config%2C%20but%20none%20seem%20to%20solve%20the%20issue.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnyone%20have%20any%20luck%20keeping%20the%20web%20sign-in%20auth%20active%20for%20long%20periods%20of%20time%3F%20I'm%20wondering%20if%20it%20is%20just%20a%20restriction%2Fmax-life%20thing%20they%20have%20on%20the%20web%20sign-in%20auth%20tokens%20or%20something.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-87817%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-87817%22%20slang%3D%22en-US%22%3E%3CP%3EI%20had%20the%20same%20problem%20and%20was%20able%20to%20login%20via%20the%20Web%20login%20method.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%20I%20am%20facing%20different%20issue%20now.%20Every%20time%20I%20disconnect%20the%20laptop%20%26amp%3B%20BToE%20gets%20unpaired%2C%20Polycom%20phone%20gets%20logged%20out.%20Also%2C%20if%20the%20phone%20%2F%20Laptop%20is%20not%20used%20for%203-4%20hrs%20(especially%20in%20night)%20or%20laptop%20goes%20to%20sleep%20mode%2C%20Polycom%20phone%20gets%20logged%20out.%20Its%20an%20absolute%20pain%20when%20someone%20has%20to%20reach%20and%20phone%20is%20logged%20out.%20Did%20any%20one%20faced%20the%20same%20problem%3F%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20far%20I%20have%20tried%20checking%20every%20possible%20configuration%2C%20but%20no%20luck.%20appreciate%20any%20clues%20here.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-48672%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-48672%22%20slang%3D%22en-US%22%3E%3CP%3EI%20would%20like%20to%20add%20that%20the%20Web%20Sign%20in%20option%20is%20strictly%20for%20Office%20365%20Skype%20Online%20users%20and%20will%20not%20work%20for%20VVX%20phones%20signed%20into%20S4B%20on%20prem%20deployments.%26nbsp%3B%20I%20have%20yet%20to%20hear%20when%20MFA%20support%20for%20scenarios%20where%20Skype%20is%20provided%20on%20prem%20and%20Exchange%20is%20in%20Office%20365%20will%20be%20coming.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-42594%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-42594%22%20slang%3D%22en-US%22%3E%3CP%3EJust%20got%20mine%20working%20tonight.%20%26nbsp%3BI%20did%20have%20to%20do%20a%20factory%20reset%20though%20to%20get%20the%20web%20signin%20option%20to%20show%20up.%20%26nbsp%3BMay%20have%20been%20some%20other%20reset%20options%20that%20would%20have%20worked...but%20try%20a%20couple%20without%20luck%20and%20then%20just%20figured%20I%20would%20do%20a%20factory%20reset.%20%26nbsp%3BWorked%20like%20charm!%20%26nbsp%3BThanks%20everyone%20for%20the%20input!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-42389%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-42389%22%20slang%3D%22en-US%22%3E%3CP%3EThanks!%20Having%20to%20reset%20everyting%20to%20get%20the%20option%20how%20to%20log%20on%20was%20the%20piece%20I%20was%20missing.%20%26nbsp%3BMy%20account%20was%20already%20in%20there%2C%20so%20I've%20never%20seen%20the%20option%20to%20log%20in%20via%20the%20web.%20%26nbsp%3BI'll%20try%20to%20reset%20everything%20tonight%20and%20see%20if%20I%20can%20get%20the%20option%20of%20how%20to%20log%20in%20to%20display%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'll%20let%20you%20know%20what%20I%20find!%20%26nbsp%3BThanks%20again%20for%20the%20link!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E~Ben%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-42284%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-42284%22%20slang%3D%22en-US%22%3E%3CP%3EActually%2C%20it%20turns%20out%20I%20found%20the%20steps%20that%20Scott%20mentioned%20at%20the%20following%20article%20--%26nbsp%3B%3CA%20href%3D%22http%3A%2F%2Fblog.schertz.name%2F2016%2F12%2Fpolycom-ucs-5-5-for-vvx-phones%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fblog.schertz.name%2F2016%2F12%2Fpolycom-ucs-5-5-for-vvx-phones%2F%3C%2FA%3E.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20looks%20like%20the%20new%205.5.1%20software%20has%20a%20'Web%20Sign-In'%20option%20that%20Scott%20mentioned.%20%26nbsp%3BOn%20my%20phone%20I%20chose%20'Sign-In'%20and%20was%20given%20the%20option%20for%20'Web%20Sign-in'.%20%26nbsp%3BIt%20stepped%20me%20through%20a%20process%20with%20a%20url%20and%20access%20code%20that%20successfully%20tied%20the%20phone%20to%20my%20account.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENow%20my%20Polycom%20phone%20is%20working%20with%20my%20Office%20365%20tenant%20with%20MFA%20enabled.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-42283%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-42283%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20fighting%20the%20same%20problem%20with%20an%20VX310%20as%20well.%20%26nbsp%3BI%20have%20tried%20both%20the%20BToE%20method%20and%20directly%20via%20the%20phones%20web%20management%20console.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBoth%20methods%20tell%20me%20my%20credentails%20are%20invalid%20when%20using%20an%20'app%20password'%20with%20MFA%20configured%20on%20the%20account%20in%20Office%20365.%20%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EScott%2C%20I%20do%20not%20see%20the%20link%2Fcode%20that%20mentioned%20when%20doing%20the%20BToE%20setup.%20%26nbsp%3BI%20am%20using%20the%20latest%20BToE%20from%20Polycom%20and%20Skype%202016.%20%26nbsp%3BCan%20you%20provide%20more%20details%20on%20your%20steps%3F%20%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-38824%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-38824%22%20slang%3D%22en-US%22%3EScott%2C%20I'm%20on%205.5.1%20as%20well.%20Were%20you%20using%20BToE%20as%20well%20or%20just%20going%20straight%20to%20the%20IP%20address%20of%20the%20phone%3F%20If%20I%20use%20the%20IP%20address%20to%20access%20the%20phone%20in%20the%20browser%20I'm%20just%20given%20the%20%22normal%22%20domain%2C%20user%2C%20password%20boxes%20to%20type%20the%20info%20in.%20I'm%20not%20seeing%20a%20code%20to%20enter%20with%20a%20link%20%3A(%3C%2Fimg%3E%3CBR%20%2F%3E%3CBR%20%2F%3EThanks%2C%3CBR%20%2F%3EBen%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-38822%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-38822%22%20slang%3D%22en-US%22%3EKyle%2C%20I'm%20on%20a%20mac%2C%20so%20unfortunately%20there%20isn't%20a%20BToE%20connector%20that%20I%20can%20use%20to%20go%20this%20route.%20I%20tried%20an%20app%20password%20right%20in%20the%20phone%20settings%20via%20the%20browser%20and%20didn't%20have%20any%20luck%20there.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-38821%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-38821%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20Christian!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-37646%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-37646%22%20slang%3D%22en-US%22%3E%3CP%3EBen%2C%20what%20version%20of%20Polycom%20UCS%20are%20you%20using%3F%20I%20have%20upgraded%20my%20phones%20to%205.5.1%20and%20was%20able%20to%20login%20over%20the%20web.%20The%20phone%20will%20give%20you%20a%20code%20to%20enter%20along%20with%20a%20link.%20Wnen%20you%20go%20to%20the%20link%20it%20sets%20it%20up%20at%20the%20HW%20level.%20Hope%20this%20helps.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-37575%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-37575%22%20slang%3D%22en-US%22%3E%3CP%3EUsing%20BToE%20and%20an%20app%20password%20I%20was%20able%20to%20get%20this%20configured.%20%26nbsp%3BJust%20used%20the%20App%20Password%20as%20part%20of%20the%20Skype%20for%20Business%20Client%20login%20and%20it%20passed%20the%20creds%20to%20the%20VVX.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-36944%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-36944%22%20slang%3D%22en-US%22%3EHi%20Ben%2C%20I%20asked%20our%20Polycom%20representative%20directly%20two%20weeks%20ago%20and%20was%20told%20that%20it%20is%20on%20the%20roadmap%20for%20a%20future%20release%20but%20no%20date%20so%20far.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-915473%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-915473%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F31465%22%20target%3D%22_blank%22%3E%40Christian%20Donner%3C%2FA%3E%26nbsp%3BCould%20you%20expand%20on%20how%26nbsp%3B%20you%20extended%20the%20token%20lifetime%20please%3F%20Thanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-917098%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-917098%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F31465%22%20target%3D%22_blank%22%3E%40Christian%20Donner%3C%2FA%3E%26nbsp%3BWe%20are%20also%20looking%20out%20how%20to%20expand%20the%20token%20lifetime.%26nbsp%3B%20Our%20users%20are%20getting%20signed%20out%20every%20few%20days.%20Can%20you%20provide%20any%20details%20on%20how%20you%20achieved%20this%3F%3C%2FP%3E%3CP%3EThanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-917106%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-917106%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F404792%22%20target%3D%22_blank%22%3E%40CosmoDenger%3C%2FA%3E%26nbsp%3B%20I%20wish%20I%20remembered%20this.%20Maybe%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fdevelop%2Factive-directory-configurable-token-lifetimes%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fdevelop%2Factive-directory-configurable-token-lifetimes%3F%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20will%20have%20to%20research%20but%20no%20time%20at%20the%20moment.%20It%20was%20definitely%20on%20one%20of%20the%20admin%20portals.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-917107%22%20slang%3D%22en-US%22%3ERe%3A%20Polycom%20VVX%20600%20and%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-917107%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F31465%22%20target%3D%22_blank%22%3E%40Christian%20Donner%3C%2FA%3E%2C%26nbsp%3BThanks!%26nbsp%3B%20I%20was%20just%20looking%20at%20the%20same%20thing.%26nbsp%3B%20I'll%20see%20what%20I%20can%20find%20out%20and%20report%20back.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Frequent Contributor

Has anyone had any luck with the Polycom VVX 600 and signing into S4B when you have MFA enabled on your account?  Or for that matter any polycom device?  I've tried app passwords and those don't seem to work either.  I haven't seen any documentaiton anywhere if this is supported or not, so just curious if anyone has any inforamtion about it and if it's not supported, when it might be.

38 Replies
Hi Ben, I asked our Polycom representative directly two weeks ago and was told that it is on the roadmap for a future release but no date so far.

Using BToE and an app password I was able to get this configured.  Just used the App Password as part of the Skype for Business Client login and it passed the creds to the VVX.

Ben, what version of Polycom UCS are you using? I have upgraded my phones to 5.5.1 and was able to login over the web. The phone will give you a code to enter along with a link. Wnen you go to the link it sets it up at the HW level. Hope this helps.

Thanks Christian!

Kyle, I'm on a mac, so unfortunately there isn't a BToE connector that I can use to go this route. I tried an app password right in the phone settings via the browser and didn't have any luck there.
Scott, I'm on 5.5.1 as well. Were you using BToE as well or just going straight to the IP address of the phone? If I use the IP address to access the phone in the browser I'm just given the "normal" domain, user, password boxes to type the info in. I'm not seeing a code to enter with a link :(

Thanks,
Ben

I am fighting the same problem with an VX310 as well.  I have tried both the BToE method and directly via the phones web management console.

 

Both methods tell me my credentails are invalid when using an 'app password' with MFA configured on the account in Office 365.  

 

Scott, I do not see the link/code that mentioned when doing the BToE setup.  I am using the latest BToE from Polycom and Skype 2016.  Can you provide more details on your steps?  

Solution

Actually, it turns out I found the steps that Scott mentioned at the following article -- http://blog.schertz.name/2016/12/polycom-ucs-5-5-for-vvx-phones/.

 

It looks like the new 5.5.1 software has a 'Web Sign-In' option that Scott mentioned.  On my phone I chose 'Sign-In' and was given the option for 'Web Sign-in'.  It stepped me through a process with a url and access code that successfully tied the phone to my account.

 

Now my Polycom phone is working with my Office 365 tenant with MFA enabled.

Thanks! Having to reset everyting to get the option how to log on was the piece I was missing.  My account was already in there, so I've never seen the option to log in via the web.  I'll try to reset everything tonight and see if I can get the option of how to log in to display :)

 

I'll let you know what I find!  Thanks again for the link!

 

~Ben

Just got mine working tonight.  I did have to do a factory reset though to get the web signin option to show up.  May have been some other reset options that would have worked...but try a couple without luck and then just figured I would do a factory reset.  Worked like charm!  Thanks everyone for the input!

I would like to add that the Web Sign in option is strictly for Office 365 Skype Online users and will not work for VVX phones signed into S4B on prem deployments.  I have yet to hear when MFA support for scenarios where Skype is provided on prem and Exchange is in Office 365 will be coming.

I had the same problem and was able to login via the Web login method. 

 

However I am facing different issue now. Every time I disconnect the laptop & BToE gets unpaired, Polycom phone gets logged out. Also, if the phone / Laptop is not used for 3-4 hrs (especially in night) or laptop goes to sleep mode, Polycom phone gets logged out. Its an absolute pain when someone has to reach and phone is logged out. Did any one faced the same problem? 

So far I have tried checking every possible configuration, but no luck. appreciate any clues here. 

I have MFA enabled and can sign in using the web sign-in method but am having the same issue with the phone logging out overnight. It's a huge pain to reach for the phone and see it is logged out...

 

I have tried fiddling with all of the available "stay signed in" options I could find in the phone config, but none seem to solve the issue. 

 

Anyone have any luck keeping the web sign-in auth active for long periods of time? I'm wondering if it is just a restriction/max-life thing they have on the web sign-in auth tokens or something.

I've also started having all kinds of issues with this.  Some with signing in, if/once I do manage to get signed in, I'm usually signed out overnight as well.  What started as a great experience has definitely gone hill quickly, to the point I rarely use the phone anymore b/c I have to sign-in every time I want to make a call (and rarely get calls b/c I'm rarely signed in).  Been using the desktop client most of the time now unfortunately.  Hopefully they can fix this...

 

Ben

I went through a multi-day torture session with support trying to use regular username/password sign in on the phone instead of the web sign-in hoping that would fix the login timeout issue. I set up an app password for the phone, but it won't authenticate with that (bad username/password errors) and support finally told me that it's a problem on Polycom's side of things...I usually give up when I reach the "it's someone else's fault" section of the MSFT support workflow chart, so I think it may be a bust. 

 

Just happy that I'm doing this testing before committing to rolling this service out to everyone here!

 

Thx for the reply. Good luck!

Thanks for this thread Ben. We have gotten some VVX 401 units in for some of our Skype PBX users (full cloud) to trial. I was also having fun and games signing in with my MFA enabled account. The next day all was well when I entered the App Password, scratching my head my colleague mentioned that it can take a while for newly created App Passwords to start working - Doh!!. Thought I'd post here in case this intel might be of use to others.

To clarify here: the VVX platform does not yet support Multi Factor Authentication (MFA) for any scenario other than the new Web-Sign In method.  So while core MFA support has been included in the UCS firmware it's only currently leveraged for using the Web Sign-In process with SfB Online accounts.  If requiring MFA for authentication for on-premises SfB Server-homed accounts the phone will most likely not sign-in.  NTLM+TLS-DSK is still required for the phones today.

Hi everyone,

 

I'm having the same difficulty as others with using the Web sign in. I get it signed in ok, but then after a few days it signs itself out and then i have to go through the web sign in process again.

 

Anyone had any updates on this at all?

 

thanks

 

Neil

HI Neil,

 

Still having the same issues here all these months later. Still can only sign in via web sign-in (cannot use userid/password even with APP password for MFA). And still get auto-signed out after a couple of days despite turning off every available "sleep" option I could find. 

 

Frustrating...

Hi Neil,

 

After Jeff's steer to use the web sign in method things have been ok for me. To be fair we're only trialling this with around a dozen users. But with them all on the most recent software (5.7.1.2205 as of this post) we haven't been experiencing any sign-outs. In fact I've been impressed (and very happy) at being able to unplug my phone, hot desk to another part of the office, plug my phone in there and then have it come back up with my account signed in automatically no questions asked - perfect.

 

Will post again if things go off the rails, but so far so good here.

 

Best regards,

 

James  

Hi James,

 

Thanks for this update, my handset may be a software version or two out of date, so i will update to the latest version and post back how i get on

 

thanks again

 

Neil

It is 2 years later and there is still no workable solution for these phones. It is quite unbelievable when you think that this is (or once was) such a strategic collaboration for MS and Polycom, and that they have not managed to work something out. I am the only one in my office who puts up with checking my phone in the morning and signing in again if needed, so that I can make and receive calls during the day. Everybody else resorted to using their personal cell phones. But we are paying through the nose for the E5 licenses and calling plans.
Now, over the past couple of months, things seem to have taken a turn for the worse. The latest firmware that MS is pushing down (5.8.0.12848) broke our ability to authenticate with the phones ("failed to fetch user certificate"). I suspect that this has to do with MS adding support for Teams and that this introduced a glitch. I now have to pin my firmware to the last one where web sign-in worked, which means that even if there ever is a fix for allowing MFA with app passwords on the device, I will not get it because I cannot allow the phones to upgrade the firmware ..... 
Is there anybody out there who deployed SFB Online with Lync handsets and can claim that it was a success? Or are the people in this thread the last few who are trying to make it work?

Hi Christian,

After our pilot earlier in the year we rolled it out to all our non mobile users (x80). Setup did take a lot of work to get my head round, but once we had the ftp server running, the right network settings in place and the handset config files set the way we wanted, they've been working well for us.

We also use MFA and I do experience the very occasional, "failed to fetch user certificate" error, but then next time round it will log straight in just fine (always using Web Sign-in) - not sure why (might be after disabling / re-enabling MFA on my account which I've had to do a couple of times?).

We are currently on software version: 5.8.1.6389. We needed to disable the auto-update feature though - for some reason the MS version that gets pulled down is a fair few versions behind the latest version on Polycom website, which confused me for a bit. In summary I do have a few more grey hairs from this but on reflection I would call it a success for our org. Now if only the pricing was a bit more reasonable...

James,

 

Very exciting to hear you got it working.  Are you by chance using a SfB Online account or do you host Skype yourselves locally?  We host our own SfB server and I get the "failed to fetch user certificate" error when attempting to sign-in using the web sign-in method.

 

Thanks!

-Brad

Brad, the Web Sign-In method is currently still only available for use with Skype for Business Online accounts, not SfB Server accounts.  Microsoft is working on a solution for this though, so hang tight.

Yes Brad, no on-prem server - for better or worse we've gone 'full cloud'. We moved offices recently and it seemed like a good point at which to retire our 16 yr old PBX (and remove another bit of kit from the comms room).

Jeff, Web Sign-in is also the _only_ option currently available for SFB Online with MFA enabled. This is classified information, apparently, because nowhere in process of enabling (and enforcing) MFA for our users did I run into a warning that would have alerted me of this. But just the other day I found this recently updated document that clarifies it  (scroll down to the table of sign-in options for various deployment scenarios):
https://docs.microsoft.com/en-us/skypeforbusiness/what-is-phone-system-in-office-365/getting-phones-...

And by the way, thank you, Jeff, for all the great information about SFB and the Polycom phones that you have assembled and curated over the years. Things would have been much more difficult for many of us without your blog.

Initiating a web sign-in from VVX-601 worked perfectly for me thanks.

Not today, sadly. Azure MFA out of service and we are completely crippled, not just the phones.

 

Ouch.  It must be Plantronics fault ;)

Is this still working for you? I am now getting an error "network is down unable to get url and pair code". I am certain that the network is not down as the username/password authentication still does not work with MFA enabled (using app password) as demonstrated by various errors that confirm connectivity.

Thanks for any info!

Aside from some occasional requests by SfB to re-authenticate, the integration with my VVX 601 on my MFA enabled O365 account is stable.  Contact syncing is my problem.

 


@Andrew Farren wrote:

Is this still working for you? I am now getting an error "network is down unable to get url and pair code". I am certain that the network is not down as the username/password authentication still does not work with MFA enabled (using app password) as demonstrated by various errors that confirm connectivity.

Thanks for any info!



, argh.

It works for me. I had to pin my firmware to 5.7.1.3782 and disallow auto-upgrades. 

I learned that this needs to be configured on the Skype side, not the phone. Here the PS script that I use:

 

Set-ExecutionPolicy RemoteSigned
Import-Module LyncOnlineConnector
$session = New-CsOnlineSession
Import-PSSession $session
Get-Module
Get-CsIPPhonePolicy
Set-CsIPPhonePolicy -EnableDeviceUpdate $false
Get-CsIPPhonePolicy
Set-CsIPPhonePolicy -EnableBetterTogetherOverEthernet $true
Get-CsIPPhonePolicy
Set-CsIPPhonePolicy -BetterTogetherOverEthernetPairingMode Auto
Get-CsIPPhonePolicy
Set-CsIPPhonePolicy -UserDialTimeoutMS 10000

 

Also great - the ability to change the token lifetime to the max allowed (was it 30 or 60 days?), it has become much less bothersome.

@Christian Donner Could you expand on how  you extended the token lifetime please? Thanks!

@Christian Donner We are also looking out how to expand the token lifetime.  Our users are getting signed out every few days. Can you provide any details on how you achieved this?

Thanks!

@CosmoDenger  I wish I remembered this. Maybe https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-configurable-token-...

I will have to research but no time at the moment. It was definitely on one of the admin portals.

@Christian Donner, Thanks!  I was just looking at the same thing.  I'll see what I can find out and report back. 

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
46 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
29 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies