Configure Sign-in for Web Agent

To enable your organization to the Web Agent, you need to have completed the following steps.

Prerequisites

 

• Before getting started make sure your account is enabled by WORKSTREAMPEOPLE to login on the Web Agent. For more information, contact your Anywhere365 representative.

 

Skype for Business On-premises – settings

When Skype for Business agents are registered to an On-premises SfB server the URL "https://webagent.anywhere365.io" needs to be in the CrossDomainAuthorizationList list of Skype for Business.

 

Viewing the Allowed List

In the Skype for Business Server Management Shell on Skype server (front end, application), execute the following command:

Get-CsWebServiceConfiguration | select -ExpandProperty CrossDomainAuthorizationList

 

Editing the Allowed List

In the Skype for Business Server Management Shell on any Skype server (front end, application), execute the following commands (replacing the text in “-Identity “Global” with your own settings):

$x = New-CsWebOrigin -Url "https://webagent.anywhere365.io"
Set-CsWebServiceConfiguration -Identity "Global" -CrossDomainAuthorizationList @{Add=$x}

 

(Optional) Get Identity of Skype for Business CSWebService

If you do not know the value of Identity for your Skype for Business CSWebService, you can run the following command to see all identities configured on the server:

Get-CsWebServiceConfiguration | select identity

 

Office365 – settings

Warning: If you switch types (for example from Skype online to Teams), you need to re-approve the Web Agent App

When using Microsoft Teams or Skype for Business Online specific permissions will be requested allowing the Web Agent (Azure Enterprise App). Below the details about the various permissions.

 

User Consent Permissions signing in as Teams User:

Note: Your tenant need to "Allow users consent for apps". If not the only users who have been granted a directory role that includes the permission to grant consent will be able to consent to new apps.

Tip: As Administrator you can consent on behalf of your whole organization. (This check box will only show for the Global Admin role, so Cloud Admin and App Admin will not see this checkbox.)
No one else will be prompted to review these permissions.

When Microsoft Teams or Skype for Business Online agents are registered in Office365, the user needs to approve the Web Agent App to be able to login

This can be done by following:

1. Got to https://webagent.anywhere365.io/

2. Login using the Office365 button and approve:

   

3. After this the user can login on https://webagent.anywhere365.io

 

These are the permissions asked if you use signs into the WebAgent for the first time and the App is not consented by the Administrator:

 

User Consent Authorize for calendar details:

Note: Your tenant need to "Allow users consent for apps". If not only users who have been granted a directory role that includes the permission to grant consent will be able to consent to new apps.

Tip: As Administrator you can consent on behalf of your whole organization. (This check box will only show for the Global Admin role, so Cloud Admin and App Admin will not see this checkbox.)
No one else will be prompted to review these permissions.

When the user want the use the calendar for the first time, the user needs to approve the Web Agent App to be able to login

1. Make sure your are signed into the WebAgent

2. Open the calendar and select authorize

3. Login using the Office365 button and approve:

   

4. After this the user can use the calendar.

 

These are the permissions asked if you use signs in calendar for the first time and the App is not consented by the administrator:

 

Grant admin consent for your Organization:

As an administrator you can grant consent on behalf of all users in this directory, ensuring that end users will not be required to consent when using the application

1. Sign into the Azure Portal

2. Navigate to Azure Active Directory

3. Navigate to Enterprise applications

4. Search and open Anywhere 365 Web Agent

5. Switch to the Permissions Tab

6. Select Grant admin consent for [Organization]

7. Login using the Office365 button and approve:

   

8. The users will no longer be prompted to consent.

 

These are the permissions asked for to the Administrator, when they consent on behalf of the organization:

Note: Admin consent will consent all permissions that can be used in the App.
This can be for both Teams and Skype for Business Online users combined, for that reason Skype for Business Online permissions are also granted.

 

Security Zones

When using in Internet Explorer make sure that one of the following is true.

1. If https://login.microsoftonline.com is in a security zone, make sure that https://webagent.anywhere365.io is also in the same security zone.

   

2. If https://login.microsoftonline.com is not in a security zone, make sure that https://webagent.anywhere365.io is also not in a security zone.

   

---

Did you find this page helpful?

Yes No