Solved MS365 login on webclient problems

[AlexanderReichert]

I have one user (so far) that after the V18 upgrade has issues logging in using MS365 sign on.
web client: the user authenticates successfully via MS365 but instead of loading the web client page it goes back to the login page. I tried several browsers all the same effect.
management console: that user has access to the management console. authentication via MS365 is successful again but when the management console loads the user is logged in via the main administrator account that was used to install the system, instead of their own account. Again tried on several browsers all behave the same.

 

[NickD_3CX]

Please try this:

1. Disable MS365 User sync and Sign In
2. Delete the Extension
3. Recreate the extension manually using the same extension number and a random name and put the email address that the user has in MS365
4. Re-enable User Sync and Sign In and check that the information of the user populate the newly created extension
5. Try logging into the WebClient again.

 

[AlexanderReichert]

Please try this:

1. Disable MS365 User sync and Sign In
2. Delete the Extension
3. Recreate the extension manually using the same extension number and a random name and put the email address that the user has in MS365
4. Re-enable User Sync and Sign In and check that the information of the user populate the newly created extension
5. Try logging into the WebClient again.

this solved the web client sign in
however the sign in for the management console is still not working as it should be.
instead of logging the user into their own account it logs them into the main admin account

 

[NickD_3CX]

this solved the web client sign in
however the sign in for the management console is still not working as it should be.
instead of logging the user into their own account it logs them into the main admin account

One down, one to go!

In the "Sign In" tab, you have 2 sections:

• Administrator Sign in
• User Sign in

Whatever user you add in the Administrator Sign in section, after they authenticate, they will be logged in as the Main Admin account.

If you add a user in the in the User Sign in section, 2 things are possible. If they access https://<your FQDN>/webclient and authenticate, they will log into the WebClient with the user they authenticated with.
Now if a user in their extension settings has Management Console access rights, if they go to https://<your FQDN>/ (not 'webclient') and authenticate, they will be logged into the Management Console with the rights granted in their extension settings.

Last one is a bit tricky, if a user is in both Administrator Sign in section and the User Sign in section, when they try to log into the Management Console with https://<your FQDN>/, they will log in with the account that has the highest privileges, meaning the Main Admin account.

I hope this makes sense.

If TL;DR, I think in your case you need to remove this user from the Administrator Sign in section if you don't want them logging in with the Main Admin account.

 

[AlexanderReichert]

One down, one to go!

In the "Sign In" tab, you have 2 sections:

• Administrator Sign in
• User Sign in

Whatever user you add in the Administrator Sign in section, after they authenticate, they will be logged in as the Main Admin account.

If you add a user in the in the User Sign in section, 2 things are possible. If they access https://<your FQDN>/webclient and authenticate, they will log into the WebClient with the user they authenticated with.
Now if a user in their extension settings has Management Console access rights, if they go to https://<your FQDN>/ (not 'webclient') and authenticate, they will be logged into the Management Console with the rights granted in their extension settings.

Last one is a bit tricky, if a user is in both Administrator Sign in section and the User Sign in section, when they try to log into the Management Console with https://<your FQDN>/, they will log in with the account that has the highest privileges, meaning the Main Admin account.

I hope this makes sense.

If TL;DR, I think in your case you need to remove this user from the Administrator Sign in section if you don;t want them logging in with the Main Admin account.

wow that was an excellent explanation. So it works as designed only I didn't understand how it works.
thanks again and now I could adjust the settings in the way I want it.
And it works now as designed.

 

[NickD_3CX]

Glad I could help out!