The system supports a lifetime maximum of 400,000 user accounts, the sum of both active and deactivated
user accounts. (This lifetime maximum number of user accounts is large enough to
the anticipated growth in the user database of any organization.)
You can add and deactivate user accounts but you cannot delete them. A deactivated user can be reactivated as necessary. Reactivated user accounts regain access to the meetings, recordings, and other data that they had access to before they were deactivated.
To prevent unauthorized sign-in to the system, deactivate any users who leave your organization. You can deactivate users in the following ways:
If your system does not use integrated SSO, you can deactivate users individually by using the GUI or by importing a CSV file with the ACTIVE field set to N for all the users you want to deactivate. See Deactivating Users for more information.
If your system uses integrated SSO you must deactivate users by removing them from the corporate directory in your SAML 2.0 IdP. This procedure cannot be performed through this product.
The system can import
and export user account values contained in a comma- or tab-delimited (CSV)
file. (A spreadsheet application, such as Microsoft Excel, can be used to
manage CSV files.) If an account in an imported CSV file does not exist, the
account is added. If the account exists, imported CSV account values replace
the current values.
The system can
export a CSV file containing user account values that can be modified and
imported back into the system or a new system.
import a CSV file, the following criteria must be met:
All fields listed in the
table are required, but the field values can be empty If a field is missing, an
error message appears. For example,
Incorrect file format. Custom10 is required.
Valid characters in the CSV
file are limited to those contained in UCS Transformation Format—8 bit (UTF-8).
When adding a new user
UserId field can be blank if the
Email field contains an email address that is not used
by another user account. If the email address matches the email address in
another user account, the user account in the CSV file is not added.
When editing a user
Email values must match an existing user account. If
they do not match a user account, none of the current values are changed to the
Up to ten
Code Groups can be defined. Tracking code group names should be
unique. Do not use predefined field names (USERID, ACTIVE, FIRSTNAME, LASTNAME,
EMAIL, LANGUAGE, HOSTPRIVILEGE, TIMEZONE, and so forth) for tracking codes.
The table lists the
required field names, descriptions, and the acceptable values.
Size and Type of Value
is automatically generated by the system and must be left blank when importing
a CSV file.
Select Browse and then select the CSV file that to be imported.
Select Comma or Tab to indicate which type of CSV file you are importing, comma-delimited or tab-delimited.
The file is imported and the system sends an email indicating how many user accounts were imported successfully and how many accounts failed to be added or modified.
What to Do Next
Select Users to view the user accounts and verify that the values were imported correctly.
Sign in to the
account type (Host or
fields with the user's information. Fields marked with an asterisk are
Meetings Server sends an email to the user with a
Password link. A user must create a password before signing in to
the WebEx site.
Password link expires after 72 hours.
The user is
added to your system.
You can change user information and activate or deactivate user accounts with the edit user feature.
Sign in to the Administration site.
The list of users appears. The default number of users shown on each page is 50. You can optionally select the Users Per Page drop-down menu and change the setting to 50 or 100.
Select a user to edit.
Make changes to the editable fields. Fields marked with an asterisk are required.
Optionally select the Force this user to change password on next
login check box.
If SSO is enabled on your system, this feature does not apply to host accounts.
Optionally activate or deactivate an account:
Select Activate to reactivate an inactive account.
Select Deactivate to deactivate an account.
Activating or deactivating an account does not save any other changes you have made to the account. You must select Save to save your changes.
Select Save. This saves your changes without altering the status of the account.
After you add or import host and administrator accounts, they are active by default. Use this feature to reactivate inactive users.
Alternatively you can activate an account on the Edit User page. See Editing Users for more information.
Sign in to the Administration site.
Select the check boxes for any inactive users you want to activate.
Select Actions > Activate.
The selected accounts are activated and the status for each account should now be "Active."
You can deactivate host and administrator accounts. Deactivating an account prevents the owner of the accounts from doing the following:
Signing in from web pages, the Outlook plugin, and
Hosting or attending meetings
Managing the system (if the user was an administrator)
Alternatively you can deactivate an account on the Edit User page. See Editing Users for more information.
Administrators cannot deactivate their own accounts.
Sign in to the Administration site.
Select the check boxes for any active users you want to deactivate.
Select Actions > Deactivate and confirm by selecting OK.
The selected accounts are deactivated and the status for each account should now be "Inactive."
You can configure tracking
codes to track host usage in specified groups. For example, you can configure
tracking codes for projects or departments. The tracking codes you configure
appear as options when you add or edit users.
You must configure the
following for each tracking code:
group–Configure your tracking code groups. Tracking code groups are used when
you add and edit users. The defaults are Division, Department, Project, Other,
and Custom5 through Custom10.
Tracking code group names
should be unique and you should not use predefined field names (USERID, ACTIVE,
FIRSTNAME, LASTNAME, EMAIL, LANGUAGE, HOSTPRIVILEGE, TIMEZONE).
Sign in to the
the name of each tracking group you want to configure in the
code group column. You do not need to change any of the fields if
you intend to use the default values.
Menu in the
mode column for each tracking code.
If you select
Input then you enter your tracking code name in a text field. If
list link appears next to your
mode field. Select the
list link to configure the values in the dropdown menu for that
tracking code. See
Editing Tracking Codes for more information.
If you select
Dropdown menu for one of your tracking code groups,
you must select
list and enter one or more options for the associated dropdown
Required in the
Usage column for each tracking code.
only change the Usage to
Optional after you have configured a dropdown menu
list. An error message appears if you attempt to configure a usage setting
used if you have not configured the Tracking code group and Input
Your tracking code
settings are saved.
Editing Tracking Codes
By default, tracking codes are displayed as text boxes. If you want to display tracking code options in a dropdown menu you must configure a list of options. After you select Dropdown menu from the Input mode dropdown menu, an Edit list link appears.
Before You Begin
To edit your tracking codes you must select Users > Tracking Codes and select Dropdown menu for your Input mode.
Select the Edit list link.
The Edit Tracking Code List dialog box appears.
Configure the fields in the Edit Tracking Codes List dialog box.
Select Show active codes only to display only active tracking codes when you open this dialog box. Deselect this option to show all tracking codes. Note that you cannot select this option the first time you configure tracking codes for each Input mode.
Select Go to first empty tracking code to go to the first page with empty code fields.
Active is selected by default. You can uncheck Active to make a tracking code inactive. Inactive tracking codes do not appear on this tracking code group's dropdown menu. Check Active to activate an inactive tracking code.
Enter the menu item name in the Code text box. Limit: 128 characters.
Select the Default radio button to make this menu item the default selection for the dropdown menu.
Select Add 20 more lines to add 20 more configurable tracking code lines. Navigation links (Next, Previous, and page numbers) are added if you have more than 20 lines to display. Limit: 500 lines (25 pages).
Select a Sort radio button to set the sorting method (Do not sort, Sort ascending, Sort descending) for the tracking codes. Note that Sort only works for the current page.
Select Update to save your settings.
Your settings are saved and the Edit Tracking Code List page closes.
integration enables your system to populate and synchronize your Cisco WebEx
Meetings Server user database with the Cisco Unified Communications Manager
(CUCM) user database that is then integrated with an LDAP directory.
integration simplifies user profile administration in the following ways:
profiles from CUCM to Cisco WebEx Meetings Server.
updates the Cisco WebEx Meetings Server database with new or modified user
attributes in the CUCM database including each user's first name, last name,
and email address. Cisco WebEx Meetings Server differentiates users by their
email addresses, so if users have the same first name and last name but
different email addresses, Cisco WebEx Meetings Server treats them as different
checks the CUCM database for inactive user entries and deactivates their user
profiles from the Cisco WebEx Meetings Server database.
system to use LDAP authentication to authenticate Cisco WebEx Meetings Server
directory integration users against the external directory.
encrypted LDAP integration when Secure LDAP (SLDAP) is enabled on CUCM and the
configured in CUCM are synchronized to Cisco WebEx Meetings Server and their
accounts are activated. You can optionally deactivate accounts after the
synchronization is complete. All active users in CUCM are synchronized into
Cisco WebEx Meetings Server. Inactive users are not imported into Cisco WebEx
Before You Begin
Make sure the
following prerequisites are met before you proceed with directory integration:
that you schedule synchronization during off-peak hours or on weekends to
minimize the impact on your users.
administrative user credentials (required to add a CUCM server for directory
configure AXL and LDAP directory service on CUCM before you can use the
directory integration feature. CUCM is required to import users into your Cisco
WebEx Meetings Server system. Use CUCM to do the following:
that all users who require host privileges are available in CUCM. Any user not
in CUCM will not be able to sign in and host meetings (all users can join as a
guest). If necessary, create CUCM groups or filters which consist of only the
users you want to import from CUCM.
CUCM users are imported into Cisco WebEx Meetings Server during your first
directory synchronization. Inactive CUCM users are not imported. Only active
new and modified users are imported during any subsequent synchronization. You
must deactivate user accounts in Cisco WebEx Meetings Server that you do not
want to give host access to. Note that a host license is only consumed in Cisco
WebEx Meetings Server when a user actually hosts a meeting. Accounts that do
not host meetings do not consume licenses. See "Managing Licenses" in
System for more information on license consumption.
Users with no
email address are not imported.
If users have
multiple accounts that use the same first name and last name but are assigned
different email addresses on CUCM, when these users are imported to Cisco WebEx
Meetings Server these addresses are treated as different users. CUCM users are
unique by username so an administrator can create multiple user accounts with
the same email address. However, accounts on the Cisco WebEx Meeting Server are
unique by email address. Therefore, if multiple CUCM user accounts have the
same email address, the administrator for CUCM should manually edit these user
accounts to make the email addresses unique before importing those accounts to
the Cisco WebEx Meetings Server.
authentication is enabled, Cisco WebEx Meetings Server uses port 8443 to
connect to CUCM when you select the
Synchronize Now, or check the
synchronization option and enter a date and time.
Meetings Server supports passwords up to 64 characters. When creating a user on
CUCM, ensure that a user's password is no more than 64 characters. Users with
passwords greater than 64 characters will not be able to sign in to Cisco
Sign in to
your Cisco WebEx Meetings Server Administration site.
Maintenance Mode and
Continue to confirm.
mode is not required to perform directory integration but a large
synchronization can affect system performance. You can put your system into
maintenance mode to prevent users from using the system during a
Users > Directory
Enter your CUCM
server information if you have not done so already:
or fully qualified domain name (FQDN)
The username and
password can be your CUCM administrator or AXL username and password. After you
configure your CUCM information, the IP address or FQDN of your CUCM server
appears under the CUCM icon.
If you have
already configured your CUCM settings, this step is not necessary and you can
proceed to the next step. After you have configured your CUCM information,
changing it is a complex procedure that can cause user synchronization problems
and is not recommended.
Cisco WebEx Meetings Server system with your LDAP directory service. You can
perform your synchronization in the following ways:
Synchronize Now to perform a synchronization
cancel synchronization after it starts.
synchronization check box and enter a date, time, and repeat
mechanism to schedule future synchronizations.
If you select
Synchronize Now, your system immediately performs a
synchronization. The time this process takes varies depending on the number of
users being synchronized. You receive an email when the synchronization is
complete. The other administrators on your system are not notified after a
Synchronize Now. If you schedule a synchronization,
it occurs at the specified date and time. All administrators receive an email
after a scheduled synchronization is complete. If you want to prevent future
synchronization, you can deselect
attributes are mapped during the synchronization process:
Cisco WebEx Meetings Server Attribute
name and last name in Cisco WebEx Meetings Server are components of the full
name that is displayed to users.
attributes in Cisco WebEx Meetings Server cannot be updated by end users.
synchronization fails, an error message appears on the page and an email with
detailed information about the error is sent to the administrator. Select
Log to see a detailed explanation of the error. The logs provided
include a deactivated user report, failed user report, and a summary.
After you have
performed at least one synchronization, a summary of your last synchronization
appears indicating whether or not it was completed, the time and date it was
completed (using the time and date configured in your Company Info settings),
and a listing of user changes including the following:
number of new users added.
Deactivated—The number of users who were deactivated.
Save if you have configured or changed your
synchronization schedule or your administrator notification settings.
Users tab and make sure that the correct users have
Remote users on the drop-down menu to filter the
user list. Make sure that the users you wanted synchronized are present in the
list. Remote users are imported into Cisco WebEx Meetings Server through a
directory synchronization. If a user is created locally first and is
overwritten by a directory synchronization, this user will become a remote
user, not a local user.
Local users to see which users were not included in
the synchronization. Local users are created locally by a Cisco WebEx Meetings
Server administrator. Local users can be added manually or imported using a CSV
Make sure your
CUCM and Cisco WebEx Meetings Server synchronization schedules are sequential.
Your CUCM synchronization must occur first and your Cisco WebEx Meetings Server
synchronization should occur immediately afterward.
administrators when synchronization completes and then select
Save. This option is selected by default and only
informs administrators after scheduled synchronizations.
system is configured to use SSO, you must first disable SSO. See
Disabling SSO for
more information. If your system is not configured to use SSO, it uses its
default authentication until you enable LDAP authentication.
enabling LDAP we recommend that administrators use Active Directory server for
user management including adding, disabling, and modifying users. After
enabling LDAP authentication, all participants must use their LDAP credentials
to sign in to the WebEx site. Administrators, however, still use their Cisco
WebEx Meetings Server credentials to sign in to the Administration site.
Make sure that
your users can sign into the system with their AD domain credentials.
If you put
your system in maintenance mode select
Off Maintenance Mode.
(Optional)If you have
performed a synchronization, you can select
Now to notify users by email that accounts have been created for
them on your Cisco WebEx Meetings Server system or when their accounts have
been changed. You can optionally select
Automatically send out notifications, which
automatically sends an email to your newly added users after each
synchronization. After any change to the authentication settings (for example,
enabling LDAP), the Users–Password Changed email is sent to affected users.
receive only one notification in their lifetime. Subsequent synchronization do
not cause additional emails to be sent.
that require notification" indicates all users that are active and have not
been notified yet.
users or local users are not sent any notification.
local user on Cisco WebEx Meetings Server sends an email to this user. However,
this user must be added on your CUCM Active Directory server before he can sign
in to the WebEx site.
only send notifications to users who were added using the synchronization
take a few minutes for your email notifications to be sent to your users. This
delay is caused by several factors that are external to your Cisco WebEx
Meetings Server system including your email server, network connectivity
issues, and spam catchers on individual email accounts.
sends the following emails:
Activation Email is sent to each user the first time they are imported into
your system in a synchronization. Users do not receive this email on subsequent
Password–Changed email is sent to users who were created locally on your
If you are
using Directory Integration with LDAP authentication, users configured in CUCM
are synchronized into Cisco WebEx Meeting Server as hosts and use their LDAP
credentials to sign in to their WebEx site. However, if you change an imported
user's account type from host to administrator, the user receives an email with
a Create Password link. A user selects this link and enters a new password for
Cisco WebEx Meetings Server. The user will use this newly created password to
sign in to the Administration site, but will continue to use the LDAP
credentials to sign in to their WebEx site.
Using CUCM to
Configure AXL Web Service and Directory Synchronization
Use CUCM to
configure AXL Web Service and directory synchronization.
Enter a target
user email address or an email alias in the
email addresses in the
Enter your subject
Enter your message
Your email is
It might take
a few minutes for your emails to be received by the users. This delay might be
caused by several factors that are external to your Cisco WebEx Meetings Server
system, including your email server, network connection speed, and spam
catchers on individual email accounts.