Import Active Directory Users via Azure AD & Enable SSO

[NikosT_3CX]

Do you have thousands of users in your local Microsoft Active Directory? Would you like to synchronize them to 3CX, just as Microsoft 365 admins can? Or do you want a simpler way to sign in to the 3CX Web Client via Microsoft OAuth? No problem, we have a solution for you - and in just 10 minutes! All you need is to create a free Azure AD, synchroni...

Continue reading the Original Blog Post.

 

[poynter]

SSO for the WebClient? Isnt that coming in v18

 

[NikosT_3CX]

SSO for the WebClient? Isnt that coming in v18

Correct !!! Setup one at your test lab on V18 and you can test it live..

Lots of things are coming to V18, example : https://www.3cx.com/blog/news/v18-dns-helper/

 

[Evolute IT]

Correct !!! Setup one at your test lab on V18 and you can test it live..

Lots of things are coming to V18, example : https://www.3cx.com/blog/news/v18-dns-helper/

When can we expect an official Alpha or Beta? (Not the techpreview we had in december)

 

[NickD_3CX]

When can we expect an official Alpha or Beta? (Not the techpreview we had in december)

We are not very far away, so hopefully fairly soon.

 

[cobaltit]

When can we expect an official Alpha or Beta? (Not the techpreview we had in december)

That was an alpha no? At least that this says:

3CX Build History / Change Log

Or do you mean one we can upgrade existing installs to without a fresh ISO install?

 

[Evolute IT]

That was an alpha no? At least that this says:

3CX Build History / Change Log

Or do you mean one we can upgrade existing installs to without a fresh ISO install?

Yes that's what I mean. The other one was more of a pre-Alpha lol)

 

[cobaltit]

Yeah. We've been running that one for a while because I was excited about SSO. But I'm used to moving our instance around for no particular reason anyway so what's another fresh install

 

[voip-toni]

Hy,
Can someone please clarify the Requirements? Is one Microsoft 365 license required for each 3cx user?
We have a local Microsoft AD and an Azure AD.
But we DONT have O365 license for all users.


https://www.3cx.com/docs/office-365-integration/

Requirements​

• A Microsoft 365 user account with “Global Administrator” privileges.
• 3CX’s Management Console needs to be accessible from the internet to receive immediate changes of users, contacts or profile.
• A 3CX PRO or ENTERPRISE edition
• One of the following Microsoft 365 subscriptions:
• Microsoft 365 Business Basic, Standard or Premium
• Microsoft 365 Enterprise E3 or E5

 

[NikosT_3CX]

@voip-toni
Lets keep things simple

For User Sync between your Local AD and Azure AD you don't need O365 license
Also for SSO with the PBX you also don't need O365 license.
For the below license plans , these apply in order to pull the Office 365 contacts and calendar entries to the PBX :

One of the following Microsoft 365 subscriptions:
Microsoft 365 Business Basic, Standard or Premium
Microsoft 365 Enterprise E3 or E5

 

[voip-toni]

That sounds great
But can I ask you something else
I have a 3CX ENT 32 license and another 3CX STD 8 "free" license
For testing SingleSignON I need PRO or ENT from 3CX.
What can I do in that case?
The ENT version uses v16.8 - Production version
it cannot be upgraded/fresh installed with v18

 

[NikosT_3CX]

@voip-toni then you can contact a 3cx partner, ask for a Proof of Concept key and test it
Check here : https://www.3cx.com/ordering/find-reseller/

 

[N_G]

Just to add to what nikosT_3CX said - to have SSO you don't need ENT or PRO, you just need to make sure the email address specified in the extension is the same as what the user will use for the SSO. Can be any, even personal, microsoft account.

Of course for larger installs syncing AD automatically is more practical.

 

[Evolute IT]

Just to add to what nikosT_3CX said - to have SSO you don't need ENT or PRO, you just need to make sure the email address specified in the extension is the same as what the user will use for the SSO. Can be any, even personal, microsoft account.

Of course for larger installs syncing AD automatically is more practical.

So the Office 365 Integration will be available on Std on V18?

 

[N_G]

@Frederick Marcoux No. My point was that SSO does not require 3CX ms 365 integration NOR a 365 account. Just a microsoft account, even the free one that anyone can get https://account.microsoft.com/ So this works with standard, you just have to enter the email of your microsoft account in the extension setting.

EDIT: Actually these changes will come available in v18. You can also use a free google account.

 

[ihu]

Is it possible to import users from AzureAD and automatically assign extension in 3CX without Microsoft 365 licenses?

@voip-toni
Lets keep things simple

For User Sync between your Local AD and Azure AD you don't need O365 license
Also for SSO with the PBX you also don't need O365 license.
For the below license plans , these apply in order to pull the Office 365 contacts and calendar entries to the PBX :

One of the following Microsoft 365 subscriptions:
Microsoft 365 Business Basic, Standard or Premium
Microsoft 365 Enterprise E3 or E5

 

[N_G]

@ihu yes it is....

 

[dipraise]

This is too good news!
It looks like a full-fledged corporate integration, and as an administrator I will stop creating accounts in different systems, with auto provisioning, it will be enough to create a user in Azure AD, this is very cool!

 

[Manuskysurfeur]

Hello 3CX Team,

I just upgraded my test environnement from v16 to v18 Alpha 4.
v16 was already working with sync users from M365.

Right now, I tried SSO connection using M365.
SSO sign in is working for "Administrator Sign in" but not for "User Sign in", I am always redirected to the login page..
I allowed the same M365 account for "Administrator Sign in" and for "User Sign in"

On Azure Log, I can saw "Operation Sucess" on each attemp for my User Sign in.

Do you have an idea ? How can I solve the issue ?

I thank you in advance for your answer.

Regards,

 

[Evolute IT]

Hello 3CX Team,

I just upgraded my test environnement from v16 to v18 Alpha 4.
v16 was already working with sync users from M365.

Right now, I tried SSO connection using M365.
SSO sign in is working for "Administrator Sign in" but not for "User Sign in", I am always redirected to the login page..
I allowed the same M365 account for "Administrator Sign in" and for "User Sign in"

On Azure Log, I can saw "Operation Sucess" on each attemp for my User Sign in.

Do you have an idea ? How can I solve the issue ?

I thank you in advance for your answer.

Regards,

redo the whole setup, I had too as well. Make sure you do the right permissions and all.