M365 SSO?

[VikingIT]

Hi there,

I wanted to understand what factors I should consider before enabling 3CX SSO for M365. Currently, I have a self-hosted 3CX instance with a PRO license running Version 20 on a Linux VM. All user accounts are created manually in 3CX at the moment.

I have a few questions and would appreciate some clarification:

1. Is it possible to retain existing extensions for users already created in 3CX after enabling M365 SSO? Additionally, how are extensions assigned once SSO is enabled?
2. Can users be synced from a specific Entra group only, rather than syncing all users?
3. During synchronization between 3CX and Entra, which user attributes need to match for existing users in 3CX (e.g., first name, last name, or email address)?
4. Is it possible to sync the "Mobile phone" attribute from Entra to the "Mobile" field in 3CX?

I understand that some of these questions may have been asked before, but I would really appreciate any insights on this.

Thanks,

 

[Evolute IT]

Hi there,

I wanted to understand what factors I should consider before enabling 3CX SSO for M365. Currently, I have a self-hosted 3CX instance with a PRO license running Version 20 on a Linux VM. All user accounts are created manually in 3CX at the moment.

I have a few questions and would appreciate some clarification:

1. Is it possible to retain existing extensions for users already created in 3CX after enabling M365 SSO? Additionally, how are extensions assigned once SSO is enabled?
2. Can users be synced from a specific Entra group only, rather than syncing all users?
3. During synchronization between 3CX and Entra, which user attributes need to match for existing users in 3CX (e.g., first name, last name, or email address)?
4. Is it possible to sync the "Mobile phone" attribute from Entra to the "Mobile" field in 3CX?

I understand that some of these questions may have been asked before, but I would really appreciate any insights on this.

Thanks,

1. The UPN is matched on the 3CX user's email to match existing extensions to users.
2. Yes, you can sync a group to a department (name it the same way) or use the "Select users" to sync, instead of all.
3. Just the email, the rest will get updated from Entra.
4. Yes, mobile phone is part of the synced attributes.

 

[VikingIT]

Thanks for the clarity @ConceptsWeb

One more question: what happens to 3CX user accounts that are not in Entra? Will they stay the same, or will they be deleted after SSO is enabled?

 

[Evolute IT]

Thanks for the clarity @ConceptsWeb

One more question: what happens to 3CX user accounts that are not in Entra? Will they stay the same, or will they be deleted after SSO is enabled?

They'll stay the same.

 

[VikingIT]

@ConceptsWeb
I implemented SSO, but now on the login page, whenever I click the Microsoft option, the page reloads and lands back on the same page, although my previous login still works.

Do you have any idea how to resolve this issue?