Hi everyone
Copilot Studio Agent published through the new Web App channel cannot be accessed when Authentication is configured as "Authenticate with Microsoft".
Environment:
- Copilot Studio new experience
- Authentication: Authenticate with Microsoft
- Knowledge source: SharePoint Online Lists
- Channel: Web App
- Embedded using the generated iframe embed code
Expected Behavior:
Users explicitly shared on the agent should be able to authenticate and chat with the agent. The agent should query SharePoint knowledge sources on behalf of the authenticated user.
Actual Behavior:
The Web App loads correctly but displays:
"You don't have access to talk to this bot, contact the owner."
Additional Findings:
- Agent owner can reproduce the issue.
- Shared users can reproduce the issue.
- Web App iframe loads successfully.
- Switching Authentication to "No authentication" immediately allows access to the agent.
- SharePoint knowledge sources require authenticated access and therefore "No authentication" is not a valid production workaround.
- Web Channel Security uses default settings.
- Agent has been republished after sharing users.
- Issue reproduced in InPrivate browser sessions.
Question:
Is this a known issue or limitation of the new Web App channel with "Authenticate with Microsoft" and SharePoint knowledge sources? and beside that, there is no Manual Authentication to use it with an app's registration