《将会议站点管理从站点管理员转换为控制中枢.pdf》由会员分享,可在线阅读,更多相关《将会议站点管理从站点管理员转换为控制中枢.pdf(42页珍藏版)》请在三个皮匠报告上搜索。
1、#CiscoLive#CiscoLiveRamesh Bodapati,Product MBRKCOL-2006Update Webex meeting site management From:Site admin(SA)To:Control hub(CH)2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveEnter your personal notes hereCisco Webex App Questions?Use Cisco Webex App to chat with the sp
2、eaker after the sessionFind this session in the Cisco Live Mobile AppClick“Join the Discussion”Install the Webex App or go directly to the Webex spaceEnter messages/questions in the Webex spaceHowWebex spaces will be moderated by the speaker until June 9,2023.1234https:/ 2023 Cisco and/or its affili
3、ates.All rights reserved.Cisco PublicBRKCOL-20063#CiscoLive 2023 Cisco and/or its affiliates.All rights reserved.Cisco PublicAgendaControl Hub as single pane of glassBenefits of updating administration to Control HubDifferences between Site Admin&Control Hub managed sitesAPIsHow to convert/update si
4、teCisco initiated automated site updateDemo&Help docsBRKCOLBRKCOL-200620064 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveUnifying all Meeting sites managementin Control Hub(CHCH)Control Hub links management for meetingsProvision all new sites on Control HubControl Hub t
5、o manage all Webex sites&servicesAnalytics for all sites in Control HubCross-launch Site Admin(SASA)for linked sites Webex sites and users linked to Control HubCurrent stateAdmins manage all new sites from Control HubUpdate/convert Sites to Control hub Management Admin manages ALL sites from Control
6、 HubBRKCOL-20065 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveBenefits of managing sites and usersin Control HubUnified way of managing users across all Webex services(Messaging,Calling,Meetings)One place to manage users(create,delete,etc)One place to assign licenses On
7、e place to deactivate users across Webex servicesCommon login for end users for all Webex ServicesModern admin controls like directory connector,SCIM,AD groups and moreLicense template for ORG and GroupsControl Hub is a Single Pane of Glass for Webex servicesManage all Webex services in one portal(l
8、ess swivel chair)Consistent security policies across all Webex ServicesWebex Webinars with more than 3000 participants(if purchased).Webinars limited to 3000 on Site Admin sitesBRKCOL-20066 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveEnd User login experience after sit
9、e is updated to CHALL sites managed in Control Hub,in addition to Webex App will have the same login(credentials)/authenticationEmail address used for login(not username)Login for non SSO ORGs User login is governed by local IdP(Webex Identity)Users can reset their own password via“forgot password”l
10、inkUsers can reset their own password via“forgot password”linkBUT,Users with a Site Admin site as primarylinkedtrainsite are sent to that site for login Login for SSO Orgs If Site Admin site was SSO&Control Hub is also SSO then Users and admin will see no change(if same IdP)If Site Admin was not SSO
11、 but linked CH Org is SSO enabled then login will be via SSO IdP*See next slide on New MultiNew Multi-IDP feature IDP feature BRKCOL-20067Recommendations for SSO sites and sites in SSO orgsLeverage new multi-IDP capabilityWebex IdP=local(Control Hub)user authenticationmultiple IDPs in Control Hub or
12、gs will help:when some users in the ORG&site are not the SSO IDP configured in the ORG where the IDP for an SSO site in Site admin is different than the SSO IDP of CH OrgGOAL:Ensure ALL users on the site being updated can login via authentication configured in Control Hub org.To accomplish that you
13、may need to add additional SSO IDPs to the Control Hub org add users to an already configured IDP add users to the local Webex IDPconfigure routing rules that decide which IDP users get directed to (routing can be based on email domain or groups).help doc for multiple IDPs in Control Hub org 2023 Ci
14、sco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveUser creation&management in Control HubWhatHowAdd users to ORGOne user at a time via Control Hub Portalbulk via CSVRest People API(today),SCIM API(new)Directory Connector,Azure License users:Host(or Attendee)automatically via auto l
15、icense templateone user at a time via Control Hub Portalbulk via CSVvia/license API(new/v1/license-assignment)Modify Meeting site attributes for users(session types,tracking codes)one user at a time via Control Hub PortalBulk update via Site CSV file;update tracking codes via CH org users CSV file f
16、or sites that have mapped to user attributesRest API:/v1/sessionTypes&/v1/trackingCodesBRKCOL-20069 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLivePassword managementSite Admin featureControl Hub(sites)Password lockout after N attemptsSmart lockout(Built in delay&captcha
17、after repeated Smart lockout(Built in delay&captcha after repeated attempts)attempts)Admin control to initialize passwords,reset passwords,force change of passwords or dealing with forgotten passwordsPassword is directly controlled between Users and Webex Password is directly controlled between User
18、s and Webex identity(oridentity(or by SSO)by SSO)Admins can force user to reset password via Admins can force user to reset password via OTPOTP(planned feature)(planned feature)BRKCOL-200610 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveNew:“required”user profile attribu
19、tesApplies to new users in the ORGWhatNew user profile fields:Alternate phone numbers,Preferred Language,Time ZoneAdmins can mark user profile fields as required for new users Note:user onboarding to ORG without these fields will failRequired user fields configuration from site will be copied to Con
20、trol Hub Org when the site is updated to Control Hub BRKCOL-200611 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLive“required”tracking codes in Control Hub enabled by mapping them to(custom)user attributesAdmins can define org specific custom user attributes Admins can mark
21、 custom attributes as“required”for new users.New user onboarding without specifying those fields will failAdmins can also mark some fields as locked which means they are not visible or editable by end users.Tracking codes can be mapped to user attributes(standard profile or custom attributes&custom
22、Synced attributes)Site Admin managed sites with“Required”tracking codes MUST map tracking codes in Control Hub Org before the site can be updated to Control HubSite Admin-2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWizard to map sites tracking codes to CH user attribut
23、esStep 1 open current Tracking code configuration and download for referenceStep 2-review add/update custom user attributes for ORG to accommodate this sites tracking codesStep 3 Map tracking codes for site to desired user attributes(profile or custom or synchronized)attributes AND initiate one-time
24、 SYNC of attribute dataHelp doc:https:/ 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveData Sync for sites that map tracking codes to user attributesThere is a one time data sync from Webex Meeting Site to mapped CH user attributesNo data copy from site to CH user attribu
25、te if the CH user already has a value OR if that attribute is externally synced(Dir-sync,etc.)Data sync started during site update to CH (for CH Sites:administrator starts data sync)notification in CH alerts center when sync is completedAfter oneAfter one-time datatime data-sync all tracking code va
26、lues for site will come from CH user attributessync all tracking code values for site will come from CH user attributesUserTracking code value before syncValue for mapped attribute before syncValue for mapped attribute after syncTracking code value after syncBobNoneNoneNoneNoneJaneNoneLondonLondonLo
27、ndonRichardGalwayNoneGalwayGalwaySamanthaDallas*San JoseSan JoseSan JoseTomNew YorkNoneNew YorkNew YorkDebraBoston*AustinAustinAustinBRKCOL-200614 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveFeatures not available in Control Hub What(site attributes)How to addressBasic
28、 license for Hosts in External Basic license for Hosts in External OrgsOrgsDeDe-activate or upgrade users to full license.activate or upgrade users to full license.See“users-to-review”CSV file for these users from“Review users”section of wizardExternal users with Standard/Full license are OKBRKCOL-2
29、00615APIs for user management on meeting sites 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveXML API admin Authentication after site conversionAuthentication in XML API on SA site Authentication in XML API on SA site(BEFORE site conversion)(BEFORE site conversion)Admin i
30、n SSO ORG(after site Admin in SSO ORG(after site conversion)conversion)Admin not in SSO Org(after site Admin not in SSO Org(after site conversion)conversion)username(webExID)/passwordWill work(1)Will work(1)username(webExID)/sessionTicketWill work Will work username/OAUTH(webExAccessToken)Will work
31、Will work email/passwordWill work(1)Will work(1)email/sessionTicketWill work Will workemail/OAUTH(webExAccessToken)Will work Will work1 backward compatibility Cisco has enabled username/password authentications to work in XML APIs after site update to CH even if username does not match emailcredenti
32、als used for API authentication cannot have a different password for user in CH orgUsername,when used in API payloads,must match email after the site is converted.BRKCOL-200617 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveRoadmap for evolving user management from XML AP
33、IOperationOperationXML API XML API 1 1Recommended Rest APIRecommended Rest APIBasic user creation in org&updates -CRUDCreateuser/setuser/deluser/v1/scim2-user(industry standard)1(coming soon)Only applies for users in orgs you manage(not for users external orgs)Assign/update licenses to usersCreateus
34、er/setuser/v1/license-assignment(coming soon)Works for external(outside the org)users tooManage groups&memberships N/A/Groups (available now)Assign Site Admin RolesCreateuser/setuservia Control Hub UI (available now)not by APIConfiguring session types or tracking codes for users Createuser/setuser/v
35、1/sessionTypes&/v1/trackingCodesWorks for users in external(outside the org)too People API is not recommended for new developments for features where alternative APIs are released(e.g.:create users via/v1/scim2-user&license users via/v1/license-assignment,etc.)New user management enhancements such a
36、s custom user attributes will not be available in People APIBRKCOL-200618 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveTransitioning User Management XML API integrations to REST APIsXML APIs will be retired(dates vary)See XML API to Rest API migration guideXML APIs user
37、 management(setuser,createuser,deluser)are now compatible with CH sites tooSo,most API integrations will work after conversion from SA to CH(without any changes)Recommendation 1:If your XML API integration for user management has NOT transitioned to REST APIs THEN update to New APIs:v1/scim2-user(wh
38、en avail)and/v1/license-assignment(when avail)Recommendation 2:Integrations using People API for user management will also need to evolve to new APIs v1/scim2-user and/v1/license-assignment BRKCOL-200619Steps to Update Administration 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#
39、CiscoLive21Prepare your CH Org before updating SiteBRKCOL-2006Review Control Hub eBook:https:/ your Control Hub Organization”in site update help docNo pending actions on the subscription associated with the site that youre updatingVerify domainsClaim all users who should be in your orgClaiming users
40、 after updating the site to CH management could result in hosts loss of access to recordings/meetingsWorkaroundRemove meeting site license,claim the user to your organization,and then re-license that user to the site.remove the meeting site licenseClaim Userre-license that user to the siteFor users
41、with external admin privileges to the organization or site:FIRST Remove all external admin access to the organizationSetup license templates for users(can be based on groups too)2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveNo downtime,No impact to meetings&recordings&No
42、 changes to site configurationDuring site update:-Meeting service continues to be available-Scheduled&ad-hoc meetings continue to be available-Meetings in progress continue(no impact)-Users can join meetings,start meetings-But,Meetings desktop client may have issues with listing“upcoming meetings”Bu
43、t,Meetings desktop client may have issues with listing“upcoming meetings”-changes to site management configuration are not recommendedchanges to site management configuration are not recommendedAfter updating site administration-current and scheduled meetings(and meet now)will continue to work.-reco
44、rdings of past meetings will be accessible-site configurations(and user site settings such as session types)are NOT changedbut,some feature differences are called out in help doc-login governed by Control Hub Org(Webex identity or SSO)login governed by Control Hub Org(Webex identity or SSO)BRKCOL-20
45、0622 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveUsers CSV files related to site conversionIn Site Admin export“users-to-review”CSV file in update administration wizardlists users that need attention.Users CSV file in Control Hub after site updateLists all users from S
46、A site(inactive SA users are listed in the file but not converted to CH site)File available for 90 days onlyRecommended action column for each userBasic license Hosts in external orgs need to be deactivated or given full licenseinconsistent email between CH&SA If recommended action is not taken then
47、 update could fail AFTER site update is triggered.BRKCOL-200623 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveUpdate to Control Hub from Site AdminCSV user export file will list users with recommended action(e.g.,deactivate user)Tool does notnot validate if recommended a
48、ction on users was taken before site update is triggeredIf users issues were not resolved the update could fail BRKCOL-200624 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveSites with required user attribute fields for onboarding users:(in Beta)required fields will be cop
49、ied from(in Beta)required fields will be copied from Site to the Control Hub org during update(OR uncheck fields required for account signup)Site to the Control Hub org during update(OR uncheck fields required for account signup)Sites with Required tracking codes(in Beta):configure tracking code map
50、 in CH org before updating site(in Beta):configure tracking code map in CH org before updating site as shown in this screenshot(OR make them optional)as shown in this screenshot(OR make them optional)25 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveSites with required tr
51、acking codes can map tracking codes to user attributes in Control Hub before updating the site(in Beta)(or mark those TCs optional)BRKCOL-200626 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveClick”Update to Control Hub”button and then hit OK in pop-upAfter successful upd
52、ating,admin loginto CH or get redirected from site urlUpdate status or error is shown in SA home screenHow long does this update take?3 min+1000 active users/min+2000 inactive users/minPaused at top of hour for 6 minutes during Business hours(xx:57 to yy:03)BRKCOL-200627 2023 Cisco and/or its affili
53、ates.All rights reserved.Cisco Public#CiscoLiveCH shows status of update CSV file of all users on SA site is available in CH after site is converted(for 90 days)Shows users whose status was active and inactive on SA siteUsers deactivated in SA will not have access to CH site BRKCOL-200628Cisco initi
54、ated automated site update 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveAutomatic site update by CiscoCisco updated thousands of sites to CH(with prior notification to administrators)IF your site has been selected for automated site update to CH you will be notified in
55、Site Admin and you can change the date of update to a later date in 2023BRKCOL-200630Suggested steps before and after site conversion 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveChecklist(before site conversion is triggered)Recommendation(not mandatory)Verify&claim you
56、r email domains in control hub Org.Review&follow recommended best practices for control hub orgsEnsure all users from your company are in your control hub orgConfigure IdPs,including Webex IdP,so that all users on site can loginIn SA,activate user linking to Control Hub for the siteVerify “Update Ad
57、ministration”tab is visible in site administration tool If not visible then request Cisco activate update administration option for that siteExport and save users CSV export on site for backup/archiveExport and save users CSV export on site for backup/archiveEnsure user emails in Control Hub match S
58、ite Admin(if SA email was changed since user was linked)Execute steps in the“site readiness assessment”portion of the Execute steps in the“site readiness assessment”portion of the site update help docsite update help docBRKCOL-200632 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#
59、CiscoLiveValidation after successful update(validation)some steps require capture of reference data before site updatesome steps require capture of reference data before site updateIn CH,download users file from conversion section for that meeting siteFor archival and to check which users were(in)ac
60、tive in SAPick a host&verify:license in CH,session types,tracking codes,scheduled meetings,meeting recordings&host can schedule&host new meetings.Pick a full admin from SA&verify they have read/write administrative privileges on CH site Add a new user to org or select user who is not a host,give the
61、m host license,modify their session types&verify they can host meetingsIf the site has API integrations confirm the integrations are working on the CH siteVerify site configuration is unmodified(spot check couple of settings)BRKCOL-200633Demo&help docs 2023 Cisco and/or its affiliates.All rights res
62、erved.Cisco Public#CiscoLiveDemoLive demo of update of site management from Site Admin to Control HubBRKCOL-200635 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveCallout for participation in Beta36BRKCOL-2006Admin-defined Custom User Attributes&Required User AttributesMap
63、 Webex site tracking codes to User Attributes in Control HubBoth have been posted on our Beta platform at Both have been posted on our Beta platform at 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveResourcesSite Update help doc https:/ between SA&CH sites:https:/ managem
64、ent in control Hub:https:/ Attributes including mapping tracking codes to user attributeshttps:/ API to Rest API migration guidehttps:/ in CH Orghttps:/ 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveFill out your session surveys!Attendees who fill out a minimum of four s
65、ession surveys and the overall event survey will get Cisco Live-branded socks(while supplies last)!These points help you get on the leaderboard and increase your chances of winning daily and grand prizesAttendees will also earn 100 points in the Cisco Live Challenge for every survey completed.BRKCOL
66、BRKCOL-2006200638 2023 Cisco and/or its affiliates.All rights reserved.Cisco PublicContinue your educationVisit the Cisco Showcase for related demosBook your one-on-oneMeet the Engineer meetingAttend the interactive education with DevNet,Capture the Flag,and Walk-in LabsVisit the On-Demand Library f
67、or more sessions at www.CiscoL you#CiscoLive 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLive41Gamify your Cisco Live experience!Get points Get points for attending this session!for attending this session!Open the Cisco Events App.Click on Cisco Live Challenge in the side menu.Click on View Your Badges at the top.Click the+at the bottom of the screen and scan the QR code:How:123441 2023 Cisco and/or its affiliates.All rights reserved.Cisco PublicBRKCOL-2006#CiscoLive