Configure Sign-in for Web Agent

Note Additional Anywhere365 WebAgent license required.

To enable your organization to the Web Agent, you need to have completed the following steps.

Prerequisites

Note When using the WebAgent make sure your browser is compatible with your user platform, Learn More

Before getting started make sure your account is enabled by WORKSTREAMPEOPLE to login on the Web Agent. For more information, contact your Anywhere365 representative.

Office365 – settings

Warning: If you switch types (for example from Skype online to Teams), you need to re-approve the Web Agent App

When using Microsoft Teams or Skype for Business Online specific permissions will be requested allowing the Web Agent (Azure Enterprise App). Below the details about the various permissions.

User Consent Permissions signing in as Teams User:

Note: Your tenant need to "Allow users consent for apps". If not the only users who have been granted a directory role that includes the permission to grant consent will be able to consent to new apps.

Tip: As Administrator you can consent on behalf of your whole organization. (This check box will only show for the Global Admin role, so Cloud Admin and App Admin will not see this checkbox.)
No one else will be prompted to review these permissions.

When Microsoft Teams or Skype for Business Online agents are registered in Office365, the user needs to approve the Web Agent App to be able to login

This can be done by following:

Got to https://webagent.anywhere365.io/
Login using the Office365 button and approve:
After this the user can login on https://webagent.anywhere365.io

These are the permissions asked if you use signs into the WebAgent for the first time and the App is not consented by the Administrator:

User Consent Authorize for calendar details:

Note: Your tenant need to "Allow users consent for apps". If not only users who have been granted a directory role that includes the permission to grant consent will be able to consent to new apps.

When the user want the use the calendar for the first time, the user needs to approve the Web Agent App to be able to login

Make sure your are signed into the WebAgent
Open the calendar and select authorize
Login using the Office365 button and approve:
After this the user can use the calendar.

These are the permissions asked if you use signs in calendar for the first time and the App is not consented by the administrator:

Grant admin consent for your Organization:

As an administrator you can grant consent on behalf of all users in this directory, ensuring that end users will not be required to consent when using the application

Sign into the Azure Portal
Navigate to Azure Active Directory
Navigate to Enterprise applications
Search and open Anywhere 365 Web Agent
Switch to the Permissions Tab
Select Grant admin consent for [Organization]
Login using the Office365 button and approve:
The users will no longer be prompted to consent.

These are the permissions asked for to the Administrator, when they consent on behalf of the organization:

Note: Admin consent will consent all permissions that can be used in the App.
This can be for both Teams and Skype for Business Online users combined, for that reason Skype for Business Online permissions are also granted.

Skype for Business On-premises – settings

When Skype for Business agents are registered to an On-premises SfB server the URL "https://webagent.anywhere365.io" needs to be in the CrossDomainAuthorizationList list of Skype for Business.

Viewing the Allowed List

In the Skype for Business Server Management Shell on Skype server (front end, application), execute the following command:

Copy

PowerShell

Get-CsWebServiceConfiguration | select -ExpandProperty CrossDomainAuthorizationList

Editing the Allowed List

In the Skype for Business Server Management Shell on any Skype server (front end, application), execute the following commands (replacing the text in “-Identity “Global” with your own settings):

Copy

PowerShell

$x = New-CsWebOrigin -Url "https://webagent.anywhere365.io"
Set-CsWebServiceConfiguration -Identity "Global" -CrossDomainAuthorizationList @{Add=$x}

(Optional) Get Identity of Skype for Business CSWebService

If you do not know the value of Identity for your Skype for Business CSWebService, you can run the following command to see all identities configured on the server:

Copy

PowerShell

Get-CsWebServiceConfiguration | select identity

Security Zones

When using in Internet Explorer make sure that one of the following is true.

If https://login.microsoftonline.com is in a security zone, make sure that https://webagent.anywhere365.io is also in the same security zone.
If https://login.microsoftonline.com is not in a security zone, make sure that https://webagent.anywhere365.io is also not in a security zone.

Did you find this page helpful?

Yes No

Sorry about that

Why wasn't this helpful? (check all that apply)

Couldn't find what I was looking for

Instructions confusing or unclear

Instructions didn't work

Thank you for your feedback.

Want to tell us more?

Email your feedback to our documentation team.

Email Feedback

Great!

Thanks for taking the time to give us some feedback.