8x8

Before You Begin

Introduction

This document describes how to configure Oracle Identity Cloud Service to provide Single Sign-On (SSO) for 8x8 using SAML.

About 8x8

8x8 Virtual Office Desktop is an all-inclusive integrated communications application that integrates a business softphone with visual voicemail, instant messaging, corporate directory, presence, video calling, call recording, fax, web conferencing, and social media.

After integrating 8x8 Oracle Identity Cloud Service:

• Users can access 8x8 using their Oracle Identity Cloud Service login credentials.
• Users can start 8x8 using the Oracle Identity Cloud Service My Apps console.
• Admins can assign and revoke user access to the 8x8 app using the Oracle Identity Cloud Service administration console.

What Do You Need?

• An Oracle Identity Cloud Service account with authorization rights to manage apps and users (Identity Domain Administrator or Application Administrator).
• An 8x8 account with authorization rights to configure federated authentication.
• Make sure that the Federation ID of each user in 8x8 matches the primary email ID of the Oracle Identity Cloud Service account.

Configuring the 8x8 App in Oracle Identity Cloud Service

Use this section to register and activate the 8x8 app, and then assign users to the app.

Prerequisite Steps

A base URL is required before you can register and activate the 8x8 app. Base URL is provided by the 8x8 app team.

Registering and Activating the 8x8 App

1. Access the Oracle Identity Cloud Service administration console, select Applications, and then click Add.

2. Click App Catalog.

3. Search for 8x8, and then click Add.

4. In the App Details section, enter your 8x8 Base URL, and then click Next.

   Note: This is the base URL provided to you by 8x8 app team.

5. Click Download Identity Provider Metadata.

   Tip: Use this file later during the 8x8 configuration in the "Configuring SSO for 8x8" section.

6. Click Download Signing Certificate.

   Tip: Use this file later during the 8x8 configuration in the "Configuring SSO for 8x8" section.

7. Click Finish. Oracle Identity Cloud Service displays a confirmation message.

8. Click Activate, and then click Activate Application. Oracle Identity Cloud Service displays a confirmation message.

Assigning Users to the 8x8 App

1. On the 8x8 app page in Oracle Identity Cloud Service, select Users, and then click Assign. The Assign Users window appears.

2. Select users that you want to assign to 8x8, and then click OK. Oracle Identity Cloud Service displays a confirmation message stating that the 8x8 app is assigned to the users that you selected.

   Note: The user account should be created on both Oracle Identity Cloud Service and 8x8 for SSO.

Configuring SSO for 8x8

1. Access 8x8 as an administrator using Base URL (e.g., https://sso.8x8pilot.com). The 8x8 home page appears.

2. Click Virtual Office Account Mgr.

3. On the Account Manager page, click ACCOUNTS, and then click Single Sign On.

4. Select the Single Sign On check box, and then select the SAML option.

5. Use the table to update the SAML Single Sign on attribute settings, and then click Save.

   Attribute	Settings
   Sign In URL	Enter the Sign In URL: https://<IDCS-Service-Instance>.identity.oraclecloud.com/fed/v1/idp/initiatesso?providerid=https://<Base_URL>/saml2.
   Sign Out URL	(Optional) Keep it blank.
   Issuer URL	Enter the Entity ID/Issuer URL. Use the metadata file that you downloaded earlier to obtain the Entity ID/Issuer URL. The Entity ID/Issuer URL information is located in the first line of the metadata. See the "Registering and Activating the 8x8 App" section.
   Identity Provider Certificate	Click Browse, and then upload the signing certificate that you downloaded during 8x8 registration in Oracle Identity Cloud Service. See the "Registering and Activating the 8x8 App" section.

6.In the User Mapping field, select Federation ID from the drop-down list, and then click Save.

Verifying the Integration

Use this section to verify that SSO works when initiated from Oracle Identity Cloud Service (IdP Initiated SSO) or from 8x8 (SP Initiated SSO).

Verifying Identity Provider Initiated SSO from Oracle Identity Cloud Service

1. Access the Oracle Identity Cloud Service My Profile console using the URL: https://<IDCS-Service-Instance>.identity.oraclecloud.com/ui/v1/myconsole.

2. Log in using credentials for a user that is assigned to the 8x8 app. Oracle Identity Cloud Service displays a shortcut to 8x8 under My Apps.

3. Click 8x8. The 8x8 home page appears.

4. Confirm that the user that is logged in is the same for both 8x8 and Oracle Identity Cloud Service.

   This confirms that SSO that is initiated from Oracle Identity Cloud Service works.

Verifying Service Provider Initiated SSO from 8x8

1. Access 8x8 using Base URL (e.g., https://sso.8x8pilot.com).

2. Click Use Single Sign On.

3. Enter your email address, and then click Continue.

4. Click Log in using SSO. You are redirected to the Oracle Identity Cloud Service login page.

5. Log in using credentials for a user that is assigned to the 8x8 app. The 8x8 home page appears.

6. Confirm that the user that is logged in is the same for both 8x8 and Oracle Identity Cloud Service.

This confirms that SSO that is initiated from 8x8 works.

Troubleshooting

Use this section to locate solutions to common integration issues.

Known Issues

8x8 displays the message, "The server encountered an SSO error. Please contact your network administrator for assistance."

Cause: The email attribute sent by Oracle Identity Cloud Service during SSO doesn't match any existing user in 8x8.

Solution: Ensure that the user that you assign to the 8x8 app has an account in both Oracle Identity Cloud Service and 8x8 with the same email address.

Oracle Identity Cloud Service displays the message, “You are not authorized to access the app. Contact your system administrator." or “There is a problem with your account. Please contact Support."

Cause: The SAML 2.0 integration between the Oracle Identity Cloud Service 8x8 app and 8x8 is deactivated.

Solution:

• Access the Oracle Identity Cloud Service administration console, select Applications, and then select 8x8.
• In the App Details section, click Activate, and then click Activate Application. Oracle Identity Cloud Service displays a confirmation message.

Oracle Identity Cloud Service displays the message, “You are not authorized to access the app. Contact your system administrator."

Cause: The administrator revokes access for the user at the same time that the user is trying to access the 8x8 app using Oracle Identity Cloud Service.

Solution:

• Access the Oracle Identity Cloud Service administration console, select Applications, and then select 8x8.
• In the App Details section, select Users, and then click Assign to re-assign the user.

Unknown Issues

For unknown issues, contact Oracle Support:

1. Go to https://support.oracle.com.

2. Select Cloud Support, and then sign in with your support credentials.

3. In the Cloud Dashboard, confirm that there are no planned outages in Oracle Identity Cloud Service, and then click Create Service Request.

4. Select Oracle Identity Cloud Service as the service type.

5. Complete your service request.