Genesys Cloud - UI New Features

 View Only

Sign Up

  • 1.  Genesys Desktop IDP SSO - first daily session auth falls back to WHfB

    Posted 11 days ago
    Edited by Bogdan Simaciu 11 days ago

    In the last months we have seen that the first session of the day needs to be authenticated via WHfB. Next sessions during the day, even if logged out, then logged in are managed by the configured SSO provider (Microsoft). We have opened a case and we have the rely that this is normal due to MFA requirements.

    We have MFA and Genesys authentication disabled at Org level.  No MFA client is configured by the users. 

    Of course the web client is unaffected.

    Any similar experiences? Possible workarounds?



    ------------------------------
    Bogdan Simaciu
    ------------------------------



  • 2.  RE: Genesys Desktop IDP SSO - first daily session auth falls back to WHfB

    Posted 10 days ago

    Is the behavior for all users, or just admins?



    ------------------------------
    George Ganahl, Orchestrator Maestro
    Technical Adoption Champion
    Genesys
    ------------------------------



  • 3.  RE: Genesys Desktop IDP SSO - first daily session auth falls back to WHfB

    Posted 9 days ago

    All users.



    ------------------------------
    Bogdan Simaciu
    ------------------------------

    Original Message


  • 4.  RE: Genesys Desktop IDP SSO - first daily session auth falls back to WHfB

    Posted 9 days ago

    You can disable the built-in Microsoft CloudAP integration for the desktop app following these instructions. 



    ------------------------------
    Brian Dupuis
    Genesys - Employees - Sr. Director, PureCloud UI
    ------------------------------



  • 5.  RE: Genesys Desktop IDP SSO - first daily session auth falls back to WHfB

    Posted 8 days ago

    CloudAP is disabled already via registry. No impact with disabling or enabling CloudAP. It was the first option investigated as we saw the release notes from Jan 2026.



    ------------------------------
    Bogdan Simaciu
    ------------------------------

    Original Message


  • 6.  RE: Genesys Desktop IDP SSO - first daily session auth falls back to WHfB

    Posted 7 days ago

    Anyone?



    ------------------------------
    Bogdan Simaciu
    ------------------------------



  • 7.  RE: Genesys Desktop IDP SSO - first daily session auth falls back to WHfB

    Posted 7 days ago

    With CloudAP disabled, I have no guesses as to why/how it would invoke any other flow than the configured IdP.



    ------------------------------
    Brian Dupuis
    Genesys - Employees - Sr. Director, PureCloud UI
    ------------------------------

    Original Message


  • 8.  RE: Genesys Desktop IDP SSO - first daily session auth falls back to WHfB

    Posted 6 days ago

    I guess the support team has no more ideas either. Discussions  revolved around the following topics already:

    • MFA user enablement (not the case for us)
    • MFA configuration at org level (Genesys login disabled altogether and MFA not ticked before)
    • MFA configuration for IDP (no changes according to our Entra admins)
    • admin vs normal users

    In general MFA enforcement should be triggered only for not IDP (SSO): "Genesys supports MFA for native login only. Single sign-on (SSO) users do not receive MFA prompts."



    ------------------------------
    Bogdan Simaciu
    ------------------------------

    Original Message


Related Content