Re: [sipcore] I-D Action: draft-ietf-sipcore-sip-token-authnz-02.txt

[Roman Shpount <[e-mail]>]

On Tue, Jul 9, 2019 at 9:29 PM Rifaat Shekh-Yusef <[e-mail]>
wrote:

> For me, the main motivation is SSO.
> The user would use one set of corporate credentials to authenticate, login
> to a deskphone, and get access to SIP and non-SIP services.
>
> I am not sure I am following your use case.
> How would the user authenticate and obtain a an access token in this case?
>
>
The use case is the same SSO in combination with hot desks and multiple
PBXs. User picks a desk at a remote office, goes to a web page to login,
enters his credentials and desk location. Expected result is that the phone
on this temporary desk will ring when user gets a call on user's extension
on the user home PBX. Internally, SSO system produces a token, which is
sent to the PBX in the remote office. PBX in the remote office registers
using this token with use home PBX, and configures that all the calls for
this registration are forwarded to the phone on the user temporary desk.
All the calls placed from that desk are also placed through user home PBX
so that correct line is used and user home caller ID is displayed.

Best Regards,
_____________
Roman Shpount