Cisco Webex Calling MT Native Call Control - Imagicle Token Authorize

Requirements

• Imagicle UCX Cloud Suite, with activated subscription licenses
• Imagicle Attendant Console client ver. 2021.Summer.2 or above
• A Full Admin user belonging to Webex Calling customer organization, with a Webex Professional license.
• Webex Calling Presence already enabled, as described here.

Limitations

• Only the primary line of a user can be controlled by Imagicle Attendant Console.

OAuth2 token for UCX Suite integration with Webex Calling Call Control

Customer must authorize Imagicle Webex Calling Integration application called Attendant Console Call Control Connector to access own Webex organization data. The following permissions are granted to the Imagicle Webex Calling Integration application:

• spark-admin:people_read
• spark-admin:organizations_read
• spark-admin:xsi

These are the minimum permissions required to retrieve basic user information, read organizations information and to invoke the XSI API to perform the call control actions. Without granting such permission, Imagicle can't provide the feature. 

Procedure

Please connect to the Imagicle Onboarding Web Portal for Webex Calling MT and enter customer's data, including above mentioned Full Admin Webex user with Webex Professional license.

Once customer data has been entered, please proceed to next page and authorize the following application highlighted in red:

Please note that other tokens might be required for users' synch from Webex Control Hub and to retrieve presence status from Webex Control Hub. Please consult relevant KB articles.

Once you have authorized all required tokens, please click on "COMPLETE REQUEST" to trigger the Imagicle internal process to enable the tokens.

Remarks

Imagicle apps authorization requires Webex apps integrations to be enabled by default. If not, you might get the following error message:

If integrations are disabled by default on your webex org (you can check the status under Webex Control Hub ⇒ Apps ⇒ Integrations ⇒ Manage you have two options: enable integrations globally or, you can selectively authorize Imagicle applications by accessing Webex Control Hub ⇒ Apps ⇒ Integrations and locate Imagicle apps by Integration ID:

The IDs for the Imagicle integrations are:

• Imagicle UCX Suite Users' Synch from Control Hub:

C89a4ba3aa80c33dd80bfc17a1572c5026049234c0aa90b7793b47dac37d7fa6c

• Imagicle Attendant Console Webex Presence Retrieval:

C1468e046a54f78620ca6d1b16eda8096165d0f960078c8e38c5ac09fb7f7f120

• Imagicle Attendant Console Call Control:

C143958d8c8645673914400fbf4b06fa022da2a7caeac67b5eb48d062709cf24e

• Imagicle Call Analytics CDRs retrieval from Control Hub:

C2b09ee9cb8a3ae94ae0e6417d7dcf7e33351ae00bbb22fb9937a79796a8371b5

Please consult relevant Cisco documentation here.

Admin User Authorizer

The authorization process involves a Full Admin user from the customer which, through own Webex account, authorizes Imagicle Integration. The above mentioned authorization may automatically expire as soon as the authorizing user changes own password. Once the authorization is removed, UC Cloud Suite won't be able to retrieve events related to that authorization. To recover the feature, a new authorization process must be executed. 

This limitation does not apply if Webex SSO is enabled.

If SSO in not enable, a user password by default expires after five years, as per the documentation (and an admin user can be created without requiring additional licenses).

This limitation is related to the authentication flow implemented by Webex, namely OAuth2 Authorization Code flow, that implies impersonating a user while accessing the Webex APIs. We are working with Cisco to remove this limitation.

The token is invalidated also in these two cases:

• Authorizing Webex user is deactivated
• Full Admin privileges are removed from the authorizing Webex user

Monitored lines

Imagicle Attendant Console can monitor and control user's Primary Line. If same user is also associated to Virtual Lines, those are ignored.