Re: [sipcore] I-D Action: draft-ietf-sipcore-sip-token-authnz-02.txt

[Roman Shpount <[e-mail]>]

Can you then explain, what is covered, ideally providing a real world use
case?

Roman Shpount

On Tue, Jul 9, 2019, 21:59 Rifaat Shekh-Yusef <[e-mail]> wrote:

> Such a use case is not covered by this document, and is out of scope.
>
> Regards,
>  Rifaat
>
>
> On Tue, Jul 9, 2019 at 9:44 PM Roman Shpount <[e-mail]> wrote:
>
>> On Tue, Jul 9, 2019 at 9:29 PM Rifaat Shekh-Yusef <[e-mail]>
>> wrote:
>>
>>> For me, the main motivation is SSO.
>>> The user would use one set of corporate credentials to authenticate,
>>> login to a deskphone, and get access to SIP and non-SIP services.
>>>
>>> I am not sure I am following your use case.
>>> How would the user authenticate and obtain a an access token in this
>>> case?
>>>
>>>
>> The use case is the same SSO in combination with hot desks and multiple
>> PBXs. User picks a desk at a remote office, goes to a web page to login,
>> enters his credentials and desk location. Expected result is that the phone
>> on this temporary desk will ring when user gets a call on user's extension
>> on the user home PBX. Internally, SSO system produces a token, which is
>> sent to the PBX in the remote office. PBX in the remote office registers
>> using this token with use home PBX, and configures that all the calls for
>> this registration are forwarded to the phone on the user temporary desk.
>> All the calls placed from that desk are also placed through user home PBX
>> so that correct line is used and user home caller ID is displayed.
>>
>> Best Regards,
>> _____________
>> Roman Shpount
>>
>>
>