> For the complete documentation index, see [llms.txt](https://atlas.anywhere.now/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://atlas.anywhere.now/channels-integrations/webagent/configure-webagent-sign-in.md). # Configure WebAgent sign-in Grant Microsoft Entra ID admin consent for WebAgent sign-in. Grant Microsoft Entra ID administrator consent for the enterprise application used by WebAgent sign-in. WebAgent uses Microsoft Entra ID for user sign-in. Depending on the deployment model and enabled capabilities, the enterprise application can request delegated permissions for sign-in, user profile data, people and contact-list functionality, presence, calendar-backed functionality, and Azure Communication Services calling or chat functionality. {% hint style="info" %} Connect and Unify use different enterprise applications and different consent URLs. Use the WebAgent consent URL for Dialogue Cloud Neo (Connect) only with WebAgent in Dialogue Cloud Neo (Connect). Use the region-specific consent URL for Dialogue Cloud Neo (Unify) only with WebAgent in Dialogue Cloud Neo (Unify). {% endhint %} ## Prerequisites * WebAgent is enabled for the customer environment. * You know whether the environment uses Dialogue Cloud Neo (Connect) or Dialogue Cloud Neo (Unify). * For Unify, you know the deployment region: GWC, APAC, or NORA. * You can sign in to the customer's Microsoft Entra tenant with a role that can grant tenant-wide administrator consent, such as Global Administrator or Privileged Role Administrator. {% hint style="warning" %} Do not reuse a consent URL for another enterprise application, deployment model, region, or tenant. Grant consent only for the enterprise application that matches the customer environment. {% endhint %} ## Review requested permissions Before granting consent, review the permissions requested by the enterprise application for the relevant deployment model. Use these lists to compare the consent prompt with the expected enterprise application for WebAgent in Dialogue Cloud Neo (Connect) or WebAgent in Dialogue Cloud Neo (Unify). ### WebAgent in Dialogue Cloud Neo (Connect) active permissions For Dialogue Cloud Neo (Connect), WebAgent requests Microsoft Graph permissions so that signed-in agents can sign in, use profile and contact-list functionality, view presence information, and use calendar-backed functionality. | Permission shown to admin | Description | Why WebAgent requests it | Permission name | | ----------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------- | ----------------------------------------- | | Maintain access to data you have given it access to | Allows the app to see and update the data you gave it access to, even when you are not currently using the app. This does not give the app any additional permissions. | Keeps the user signed in. | Not shown in GoLive source | | View your basic profile | Allows the app to see your basic profile, including name, picture, and user name. | Allows WebAgent to sign you in and show basic information such as display name and photo. | Microsoft Graph / `profile` | | Sign in and read user profile | Allows users to sign in to the app, allows the app to read the profile of signed-in users, and allows the app to read basic company information of signed-in users. | Allows WebAgent to sign you in and show basic information such as display name and photo. | Microsoft Graph / `User.Read` | | Read your relevant people list | Allows the app to read a list of people in the order that is most relevant to you, including local contacts, social-network contacts, people listed in your organization's directory, and people from recent communications. | Populates the contacts list and lets you search for contacts. | Microsoft Graph / `People.Read` | | Read all users' basic profiles | Allows the app to read a basic set of profile properties of other users in your organization, including display name, first and last name, email address, and photo. | Allows WebAgent to load additional information about a user, such as business phone, mobile phone, and photo. | Microsoft Graph / `User.ReadBasic.All` | | Read all users' full profiles | Allows the app to read the full set of profile properties, reports, and managers of other users in your organization on behalf of the signed-in user. | Allows WebAgent to search on additional user information, specifically department and job title. | Microsoft Graph / `User.Read.All` | | Read your presence information | Allows the app to read your presence information, including activity, availability, status note, calendar out-of-office message, time zone, and location. | Presents your presence information in WebAgent. | Microsoft Graph / `Presence.Read` | | Read presence information of all users in your organization | Allows the app to read presence information of all users in the directory on your behalf, including activity, availability, status note, calendar out-of-office message, time zone, and location. | Shows the presence of other users in the contact list. | Microsoft Graph / `Presence.Read.All` | | Read your calendars | Allows the app to read events in your calendars. | Allows WebAgent to show your calendar events. | Microsoft Graph / `Calendars.Read` | | Read calendars you can access | Allows the app to read events in all calendars that you can access, including delegate and shared calendars. | Allows WebAgent to show calendar events shared to you. Shared calendars must allow "Can view all details". | Microsoft Graph / `Calendars.Read.Shared` | ### WebAgent in Dialogue Cloud Neo (Unify) active permissions For Dialogue Cloud Neo (Unify), the front-end enterprise application is used by WebAgent and Dialogue Workspace. It requests Azure Communication Services and Microsoft Graph permissions so that signed-in users can sign in, use Microsoft Teams calling or chat capabilities exposed through the front end, use profile and contact-list functionality, view and update presence where the enabled capability requires it, and use calendar-backed functionality. | Permission shown to admin | Description | Why WebAgent requests it | Permission name | | ----------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------ | | Manage Teams calls | Allows the app to manage Teams calls through Azure Communication Services. | Allows WebAgent to handle call controls for Dialogue Cloud Neo (Unify). | Azure Communication Services / `Teams.ManageCalls` (Delegated) | | Manage Teams chats | Allows the app to manage Teams chats through Azure Communication Services. | Supports the Azure Communication Services communication session used by WebAgent for Dialogue Cloud Neo (Unify). | Azure Communication Services / `Teams.ManageChats` (Delegated) | | Manage Teams extension calls | Allows the app to manage calls that use Microsoft Teams Phone Extensibility. | Allows WebAgent to handle call controls through the Dialogue Cloud Neo (Unify) connect model. | Azure Communication Services / `Teams.Extension.ManageCalls` (Delegated) | | Read your calendars | Allows the app to read events in your calendars. | Allows WebAgent to show your calendar events. | Microsoft Graph / `Calendars.Read` (Delegated) | | Read calendars you can access | Allows the app to read events in all calendars that you can access, including delegate and shared calendars. | Allows WebAgent to show calendar events shared to you. Shared calendars must allow "Can view all details". | Microsoft Graph / `Calendars.Read.Shared` (Delegated) | | Sign users in | Allows the app to sign in users with their organizational account. | Allows WebAgent to sign users in. | Microsoft Graph / `openid` (Delegated) | | Read your relevant people list | Allows the app to read a list of people in the order that is most relevant to you, including local contacts, social-network contacts, people listed in your organization's directory, and people from recent communications. | Populates the contacts list and lets you search for contacts. | Microsoft Graph / `People.Read` (Delegated) | | Read your presence information | Allows the app to read your presence information, including activity, availability, status note, calendar out-of-office message, time zone, and location. | Presents your presence information in WebAgent. | Microsoft Graph / `Presence.Read` (Delegated) | | Read presence information of all users in your organization | Allows the app to read presence information of all users in the directory, including activity, availability, status note, calendar out-of-office message, time zone, and location. | Shows the presence of other users in the contact list. | Microsoft Graph / `Presence.Read.All` (Delegated) | | Read and write presence information | Allows the app to read and write presence information. | Allows WebAgent to update presence information for Dialogue Cloud Neo (Unify). | Microsoft Graph / `Presence.ReadWrite` (Delegated) | | View your basic profile | Allows the app to see your basic profile, including name, picture, and user name. | Allows WebAgent to sign you in and show basic information such as display name and photo. | Microsoft Graph / `profile` (Delegated) | | Sign in and read user profile | Allows users to sign in to the app, allows the app to read the profile of signed-in users, and allows the app to read basic company information of signed-in users. | Allows WebAgent to sign you in and show basic information such as display name and photo. | Microsoft Graph / `User.Read` (Delegated) | | Read all users' full profiles | Allows the app to read the full set of profile properties, reports, and managers of other users in your organization. | Allows WebAgent to search on additional user information, specifically department and job title. | Microsoft Graph / `User.Read.All` (Delegated) | | Read all users' basic profiles | Allows the app to read a basic set of profile properties of other users in your organization, including display name, first and last name, email address, and photo. | Allows WebAgent to load additional information about a user, such as business phone, mobile phone, and photo. | Microsoft Graph / `User.ReadBasic.All` (Delegated) | ## Grant consent Use the direct admin-consent URL for the relevant deployment model. Grant consent once per Microsoft Entra tenant, unless the customer environment changes to a different enterprise application, deployment model, or Unify region. ### Grant WebAgent in Dialogue Cloud Neo (Connect) consent Use this procedure for Dialogue Cloud Neo (Connect). 1. Sign in with an account that can grant tenant-wide administrator consent. 2. Open the following admin-consent URL for WebAgent in Dialogue Cloud Neo (Connect) in a browser: ``` https://login.microsoftonline.com/common/adminconsent?client_id=74d56274-d17b-4a8d-8e4f-fa424af82961&redirect_uri=https%3A%2F%2Fwebagent.anywhere365.io%2F ``` 3. Review the requested permissions, including Microsoft Graph permissions for sign-in, people, presence, and calendar capabilities. 4. Grant administrator consent for the organization. 5. Confirm that consent is granted for the expected tenant. ### Grant WebAgent in Dialogue Cloud Neo (Unify) consent Use this procedure for Dialogue Cloud Neo (Unify). Select the consent URL for the deployment region only. | Region | Consent URL | | ------ | ------------------------------------------------------------------------------------------------------ | | GWC | `https://login.microsoftonline.com/common/adminconsent?client_id=38665bce-1219-48b3-bdb1-c1a2a34c78a8` | | APAC | `https://login.microsoftonline.com/common/adminconsent?client_id=09f17a02-381a-4a53-a622-dad6ca015ab2` | | NORA | `https://login.microsoftonline.com/common/adminconsent?client_id=b11e46dd-979c-4ff4-9301-db12a6cf8a0f` | 1. Sign in with an account that can grant tenant-wide administrator consent. 2. Open the consent URL for the customer's Unify region. 3. Review the requested Azure Communication Services and Microsoft Graph permissions. 4. Grant administrator consent for the organization. 5. Confirm that consent is granted for the expected tenant and region-specific enterprise application for WebAgent in Dialogue Cloud Neo (Unify). Users may still see consent or authorization prompts when tenant policy requires user consent, when an expected permission has not been granted tenant-wide, or when a capability such as contacts, presence, calendar access, calling, or chat is first used. ## Validate sign-in 1. Open WebAgent in a test browser session. 2. Sign in with a user that is enabled for WebAgent. 3. Confirm that the user is redirected through Microsoft Entra ID and returns to WebAgent successfully. 4. If consent is required during sign-in, confirm whether tenant-wide administrator consent was granted for the correct deployment model and enterprise application. 5. If contacts, presence, calendar-backed functionality, calling, or chat is enabled, validate those capabilities with a test user and confirm that the enterprise application can request or use the required permissions. ## Troubleshooting | Symptom | Check | | --------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | The user cannot complete sign-in | Confirm WebAgent is enabled for the user and that administrator consent was granted in the correct Microsoft Entra tenant. | | The consent prompt appears unexpectedly | Confirm tenant-wide administrator consent was granted for the correct deployment model, enterprise application, and, for Unify, region. Also confirm tenant user-consent policy. | | Sign-in or consent fails after using a consent URL | Confirm the consent URL matches the customer deployment model. For Unify, confirm the URL matches the customer's deployment region. | | Contacts, presence, calendar information, calling, or chat is unavailable after sign-in | Confirm the relevant permissions are requested and consented for the environment, and confirm that the corresponding WebAgent capability is enabled. | --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://atlas.anywhere.now/channels-integrations/webagent/configure-webagent-sign-in.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.