You'll need to have Web access enabled on the phones.
You will also need to have phones associated to a user account. This is the same user account that you use to log into https://<cm ip>/ccmuser
I've used another technique in the lab.
If using CME or CM, point the authentication URL to a webserver you have built. Create a simple HTML that prints out the text "authenticated".