The Expressway-C now defaults to SHA-256 for signing SSO requests it gives to clients, and you can
change it to use SHA-1 if required. In version X8.5, when the SSO feature was previewed, the Expressway-
C defaulted to SHA-1 and there was no way to select a different algorithm.

Note: If you were using the SSO feature with X8.5, this change may cause it to stop working after upgrade to
X8.5.1. You have two options to resolve this: leave the new default on the Expressway-C, and you may need
to reconfigure the IdP to expect requests to be signed with SHA-256 (recommended for better security); the
other option is to revert the Expressway-C's signing algorithm to SHA-1 for your IdP (go to

Configuration

> Unified Communications > Identity Providers (IdP)

, locate your IdP row, then in

Actions

column click

Configure Digest).

Jabber 10.6 File Transfer support

The Cisco Jabber file transfer over MRA limitation, which was previously documented in Expressway
documents, has now changed as follows:

Cisco Expressway Administrator Guide (X8.5.1)

Page 19 of 399

Introduction

What’s new in this version?