Configure Sign-in for Web Agent
Note Additional Anywhere365 WebAgent license required.
To enable your organization to the Web Agent, you need to have completed the following steps.
Prerequisites
Note When using the WebAgent make sure your browser is compatible with your user platform, Learn More
-
Before getting started make sure your account is enabled by WORKSTREAMPEOPLE to login on the Web Agent. For more information, contact your Anywhere365 representative.
Skype for Business On-premises – settings
When Skype for Business agents are registered to an On-premises SfB server the URL "https://webagent.anywhere365.io" needs to be in the CrossDomainAuthorizationList list of Skype for Business.
Viewing the Allowed List
In the Skype for Business Server Management Shell on Skype server (front end, application), execute the following command:
Get-CsWebServiceConfiguration | select -ExpandProperty CrossDomainAuthorizationList
Editing the Allowed List
In the Skype for Business Server Management Shell on any Skype server (front end, application), execute the following commands (replacing the text in “-Identity “Global” with your own settings):
$x = New-CsWebOrigin -Url "https://webagent.anywhere365.io"
Set-CsWebServiceConfiguration -Identity "Global" -CrossDomainAuthorizationList @{Add=$x}
(Optional) Get Identity of Skype for Business CSWebService
If you do not know the value of Identity for your Skype for Business CSWebService, you can run the following command to see all identities configured on the server:
Get-CsWebServiceConfiguration | select identity
Office365 – settings
Warning: If you switch types (for example from Skype online to Teams), you need to re-approve the Web Agent App
When using Microsoft Teams or Skype for Business Online specific permissions will be requested allowing the Web Agent (Azure Enterprise App). Below the details about the various permissions.
User Consent Permissions signing in as Teams User:
Note: Your tenant need to "Allow users consent for apps". If not the only users who have been granted a directory role that includes the permission to grant consent will be able to consent to new apps.
Tip: As Administrator you can consent on behalf of your whole organization. (This check box will only show for the Global Admin role, so Cloud Admin and App Admin will not see this checkbox.)
No one else will be prompted to review these permissions.
When Microsoft Teams or Skype for Business Online agents are registered in Office365, the user needs to approve the Web Agent App to be able to login
This can be done by following:
-
Login using the Office365 button and approve:
-
After this the user can login on https://webagent.anywhere365.io
These are the permissions asked if you use signs into the WebAgent for the first time and the App is not consented by the Administrator:

Description: Allows you to sign in to the app with your organizational account and let the app read your profile. It also allows the app to read basic company information.
Why is this required? To allow the WebAgent to sign you in and to show basic information like displayname and photo.
Permission name: Microsoft Graph / User.Read

Description: Allows the app to read a list of people in the order that's most relevant to you. This includes your local contacts, your contacts from social networking, people listed in your organization's directory, and people from recent communications.
Why is this required? To populate the contacts list and lets you search for contacts.
Permission name: Microsoft Graph / People.Read

Description: Allows the app to read your presence information on your behalf. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.
Why is this required? To present your presence information into the WebAgent.
Permission name: Microsoft Graph / Presence.Read

Description: Allows the app to read presence information of all users in the directory on your behalf. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.
Why is this required? To show you the presence of other users in the contact list.
Permission name: Microsoft Graph / Presence.Read.All

Description: Allows the app to see and update the data you gave it access to, even when you are not currently using the app. This does not give the app any additional permissions.
Why is this required? This allows the WebAgent to keep signing you in.
User Consent Authorize for calendar details:
Note: Your tenant need to "Allow users consent for apps". If not only users who have been granted a directory role that includes the permission to grant consent will be able to consent to new apps.
Tip: As Administrator you can consent on behalf of your whole organization. (This check box will only show for the Global Admin role, so Cloud Admin and App Admin will not see this checkbox.)
No one else will be prompted to review these permissions.
When the user want the use the calendar for the first time, the user needs to approve the Web Agent App to be able to login
-
Make sure your are signed into the WebAgent
-
Open the calendar and select authorize
-
Login using the Office365 button and approve:
-
After this the user can use the calendar.
These are the permissions asked if you use signs in calendar for the first time and the App is not consented by the administrator:

Description: Allows the app to read events in your calendars.
Why is this required? To allow the WebAgent show your calendars events.
Permission name: Microsoft Graph / Calendars.Read

Description: Allows the app to read events in all calendars that you can access, including delegate and shared calendars.
Why is this required? To allow the WebAgent show calendars events shared to you.
Note: You need "Can view all details" permission on the shared calendar.
Permission name: Microsoft Graph / Calendars.Read.Shared

Description: Allows the app to see your basic profile (name, picture, user name)
Why is this required? To allow the WebAgent to sign you in and to show basic information like displayname and photo.
Permission name: Microsoft Graph / profile
Grant admin consent for your Organization:
As an administrator you can grant consent on behalf of all users in this directory, ensuring that end users will not be required to consent when using the application
-
Sign into the Azure Portal
-
Navigate to Azure Active Directory
-
Navigate to Enterprise applications
-
Search and open Anywhere 365 Web Agent
-
Switch to the Permissions Tab
-
Select Grant admin consent for [Organization]
-
Login using the Office365 button and approve:
-
The users will no longer be prompted to consent.
These are the permissions asked for to the Administrator, when they consent on behalf of the organization:
Note: Admin consent will consent all permissions that can be used in the App.
This can be for both Teams and Skype for Business Online users combined, for that reason Skype for Business Online permissions are also granted.

Description: Allows the app to read user contacts.
Why is this required? To populate the contacts list and lets you search for contacts.
Permission name: Microsoft Graph / Contacs.Read

Description: Allows users to sign-in to the app, and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users.
Why is this required? To allow the WebAgent to sign you in and to show basic information like displayname and photo.
Permission name: Microsoft Graph / User.Read

Description: Allows users to sign in to the app, and allows the app to read the profile of signed-in users. It also allow the app to read basic company information of signed-in users.
Why is this required? To allow the WebAgent to sign you in and to show basic information like displayname and photo.
Permission name: Windows Azure Active Directory / User.Read

Description: Allows the app to read a basic set of profile properties of all users in your company or school on behalf of the signed-in user. Includes display name, first and last name, photo, and email address. Additionally, this allows the app to read basic info about the signed-in user's reports and manager.
Why is this required? To allow the WebAgent to load additonal information about users. For example IM address, business phone and mobile.
Permission name: Windows Azure Active Directory / User.ReadBasic.All

Description: Allows the app to initiate instant messages, audio, video, and desktop sharing conversations; and join meetings on-behalf of the signed-in user
Why is this required? To allow Skype for Business Online users to initiate a conversation from the WebAgent.
Permission name: Skype for Business Online / Conversations.Initiate

Description: Allows the app to read and update presence, photo, location, note, call forwarding settings of the signed-in user
Why is this required? To allow Skype for Business Online users to update their presence in the WebAgent.
Permission name: Skype for Business Online / User.ReadWrite

Description: Allows the app to receive instant messages, audio, video, and desktop sharing invitations on-behalf of the signed-in user
Why is this required? To allow Skype for Business Online users to receive a conversation from the WebAgent.
Permission name: Skype for Business Online / Conversations.Receive

Description: Allows the app to read and write Skype user contacts and groups
Why is this required? To allow the WebAgent to show and edit the Skype for Business Online users contact.
Permission name: Skype for Business Online / Contacts.ReadWrite
Security Zones
When using in Internet Explorer make sure that one of the following is true.
-
If https://login.microsoftonline.com is in a security zone, make sure that https://webagent.anywhere365.io is also in the same security zone.
-
If https://login.microsoftonline.com is not in a security zone, make sure that https://webagent.anywhere365.io is also not in a security zone.
Did you find this page helpful?
Yes No
Sorry about that
Why wasn't this helpful? (check all that apply)
Thank you for your feedback.
Want to tell us more?
Email your feedback to our documentation team.
Great!
Thanks for taking the time to give us some feedback.