Enable digest authentication
AI-generated summary
Genesys Cloud enables digest authentication configuration for both external and phone SIP trunks to secure inbound and outbound SIP requests. External trunks support digest authentication for both directions, while phone trunks support inbound digest authentication only. To configure outbound digest authentication on external trunks, administrators must access the Telephony > Trunks menu, select the desired external trunk, enable the outbound digest authentication checkbox, specify the authentication realm, and enter credentials (username and password). For phone trunks, inbound digest authentication is configured through the same menu path by selecting the phone trunk, enabling inbound digest authentication, choosing the SIP method to be challenged, entering the realm, and providing credentials. Both configurations allow administrators to mask or display passwords in plain text. The feature requires Telephony > Plugin > All permissions to access these settings.
- Telephony > Plugin > All permission
When configuring external SIP trunks or phone SIP trunks, you may find that inbound or outbound SIP requests require authentication. If so, you can enable and configure the digest authentication settings.
External trunks
External trunks have digest authentication for both inbound and outbound.
- Click Menu > Digital and Telephony > Telephony > Trunks.
- Click the External Trunks tab.
- From the list, select the trunk you want to configure.
- Under Inbound > Digest Authentication, select the Enable inbound digest authentication check box.
- In the Authorization methods list box, select all of the available SIP methods that you want to be challenged using SIP digest authentication. The default is
INVITE. - In the Authorization algorithm list box, select the Hash algorithm you want to use for SIP digest authentication challenge responses. The default is
SHA-256.Note: Keep in mind that not all of the available algorithms are FIPS-compliant. - In the Realm box, enter the authentication domain that you want to use in SIP authentication challenge responses. The default is
genesys.cloud. - Under Credentials:
- In the User name box, enter a user name.
- In the Password box, enter the password.
- By default the password is masked, but you can select Show password hidden Icon included/hidden to see the password in plain-text.
- Click Save External Trunk.
- Click Menu > Digital and Telephony > Telephony > Trunks.
- Click the External Trunks tab.
- From the list, select the trunk you want to configure.
- Under Outbound > Digest Authentication, select the Enable outbound digest authentication check box.
- In the Realm box, enter the authentication domain that you want to use in SIP authentication challenge responses.
- Under Credentials:
- In the User name box, enter a user name.
- In the Password box, enter the password.
- By default the password is masked, but you can select Show password to see the password in plain-text.
- Click Save External Trunk.
Phone trunks
Phone trunks have digest authentication for inbound.
- Click Menu > Digital and Telephony > Telephony > Trunks.
- Click the Phone Trunks tab.
- From the list, select the trunk you want to configure.
- Under Inbound > Digest Authentication, select the Enable inbound digest authentication check box.
- In the Authorization methods list box, select one of the available SIP methods that you want to be challenged using SIP digest authentication.
- In the Realm box, enter your authentication domain.
- Under Credentials:
- In the User name box, enter a user name.
- In the Password box, enter the password.
- By default the password is masked, but you can select Show password to see the password in plain-text.
- Click Save Phone Trunk.
[NEXT] Was this article helpful?
Get user feedback about articles.