The EmpowerID Webex Enterprise connector allows organizations to manage and synchronize Webex Enterprise user data. Once connected, you can manage this data from EmpowerID in the following ways:

EmpowerID provides Provisioning policies (resource entitlements) that allow you to automatically provision Webex Enterprise accounts for any person within your organization based on your policy requirements. For more information, see Provisioning Policies.


Enable API integration for your Webex Enterprise site. 
Collect the following information from your Webex Enterprise account:
  • Site Name — The bold part of this sample site URL is the site name https://apidemoeu.webex.com
  • Site ID — This is a six- to eight-digit number issued by Webex.
  • Partner ID This is a string issued by Webex, for example, g0webx!
  • Webex ID — This is your Webex site admin's user name.
  • Password — This is your Webex site admin's password.


This topic demonstrates how to connect EmpowerID to Webex Enterprise and is divided into the following activities:

To connect EmpowerID to your Webex Enterprise site
  1. Log in to the EmpowerID Management Console as an administrator.
  2. Click the application icon and select Configuration Manager from the menu.
  3. In Configuration Manager, select the Account Stores node and then click the Add New button above the grid.




  4. In the Add New Security Boundary window that opens, select WebEx Enterprise from the Security Boundary drop-down and then click OK.



  5. In the General page that appears, enter these settings from your Webex Enterprise account:
    • Site Name — The bold part of this sample site URL is the site name https://apidemoeu.webex.com
    • Site ID — This is a six- to eight-digit number issued by Webex.
    • Partner ID — This is a string issued by Webex, for example, g0webx!
    • Webex ID — This is your Webex site admin's user name.
    • Password — This is your Webex site admin's password.



  6. Click Save.
  7. Back in the Configuration Manager, search for the account store you just created and double-click it (or right-click it and select Edit from the context menu).

    This opens the Account Store Details screen for the Webex Enterprise connector. 

To configure the Webex Enterprise account store
The Account Store Details screen contains two panes, the General pane and the Inventory pane, with settings that allow you to configure the Webex account store you just created. To view reference information about a particular pane, expand the drop-down for that pane.



This pane is used to set general configuration information for the Account Store.
  • Account Store Name — This is the name you gave to the account store when you created it. To change this name, click the Edit  button, enter a new name in the Account StoreFriendly Name window that appears and then click OK to close the window.
  • Resource System Name — This is the name of the resource system EmpowerID created for the account store. To change this name, click the Edit  button, enter a new name in the Resource System Friendly Name window that appears and click OK.
  • Password Manager Policy — Select a password manager policy to use with the account store, or leave this value blank to use the default policy.
  • Connection Account — This is the site name and Webex ID that you provided when creating the account store.
  • Credential Proxy — This allows you to specify a credential with a password that has been vaulted in EmpowerID. The credential must belong to an account that has the necessary privileges. If you select a Credential Proxy, EmpowerID uses that account and not the Connection Account. You can select a Credential Proxy at any time by clicking the Edit  button and selecting the appropriate controller in the Change Domain Controller window.
  • Maximum Accounts per Person — This specifies the maximum number of user accounts from this domain that an EmpowerID Person can have linked to them.
  • Resource Enforcement Type — This specifies how EmpowerID enforces rights in native systems. The types available include:
    • No Action — No rights enforcement action occurs.
    • Projection with No Enforcement — Changes to rights within EmpowerID occur only within EmpowerID; they are not passed on to the native environment.
    • Projection with Enforcement — Changes to rights within EmpowerID occur within EmpowerID and are enforced within the native environment.
    • Projection with Strict Enforcement — EmpowerID overrides any changes made in the native environment. All changes made must occur within EmpowerID to be accepted.
  • Icon — This is the image icon that represents this account store in the EmpowerID user interfaces.

This pane is used to enable or disable inventory of the account store as well as to set the run schedule for the EmpowerID Inventory Job.
  • Inventory Schedule — This is the time span that occurs before EmpowerID performs a complete inventory of the resource system. The default value is 10 minutes. You can change this at any time by clicking the Edit button.
  • Enable Inventory — This allows EmpowerID to inventory the Account Store. The Inventory Job must be enabled for inventory to occur. This is discussed further below.
  • Inventory Provision Request Workflow — This is the request workflow that is initiated when new accounts are discovered via the inventory feature. If you set this workflow, the Allow Automatic Person Provision and Allow Automatic Join Provision flags described below are ignored. You can enable this feature by clicking the Edit  button.
  • Allow Automatic Person Provision on Inventory — This allows EmpowerID to provision EmpowerID people for new accounts discovered during the inventory process if they meet the Provision Rule specified by the Custom_Account_InventoryInboxGetAccountsToProvision SQL stored procedure. This setting is discussed further below.
  • Allow Automatic Person Join on Inventory — This allows EmpowerID to join newly discovered accounts to people during the inventory process if they meet the Join Rule as specified by the Custom_Account_InventoryInboxJoinBulk SQL stored procedure. This setting is discussed further below.
  • RBAC-Assign Initial Group Membership On First Inventory — This setting pertains to Active Directory account stores only.
  • Re-Inventory — Enabling this option re-inventories all changes.
  • Allow Business Role and Location Recalculation — This allows EmpowerID to recalculate Business Role and Location combinations during inventory. Leave this setting 


  1. From the General pane of the Account Store Details screen, optionally click the Edit button to the right of any settings that you want to change. For example, you can change the Account Store and Resource System names to something more user friendly, or select a custom Password Manager Policy that you have created.



  2. In the Inventory pane of the Account Store Details screen for the account store, optionally toggle the icon to the right of the Allow Automatic Person Provision On Inventory setting from a red sphere to a green check box if you want EmpowerID to automatically create a linked EmpowerID Person object for each new, unique Webex user discovered during the inventory process.



    1. Click the Edit button to the right of Business Role for New Inventory Provision and select an appropriate Business Role for each new Person provisioned during inventory.
    2. Click OK to close the Business Role Selector.
    3. Click the Edit button to the right of Location For New Inventory Provision and select an appropriate Location for each Person EmpowerID provisions during inventory.
    4. Click OK to close the Location Selector.

  3. The last step is to enable inventory. To do so, toggle the red sphere to the left of Enable Inventory so that it becomes a green check box.
  4. After several minutes, refresh the account store data by pressing the Refresh Data button located a the top of the Account Store Details screen. You should see that EmpowerID has inventoried the users in your Webex Enterprise site and provisioned the requisite number of EmpowerID Persons for those accounts (if you selected the provisioning options discussed above).



Provisioning Policies