Unanswered

How to bypass validation code after authentication is successful?

(1) Share

Report

Posted on by anonymous882

Hello,

I am trying to bypass the double validation in the power virtual agent upon authentication. After the user is prompted to sign in and then redirected to authentication page I want to avoid this page:

and just want the user to be redirected back to the chat window. One of the solutions I saw was using sample canvas https://github.com/microsoft/CopilotStudioSamples/blob/master/BuildYourOwnCanvasSamples/3.single-sign-on/index.html but would I have to create a new authentication using MSAL instead of leveraging the authentication I configured inside power virtual agent?

Categories:

Bot administration

I have the same question (0)

All responses (4)

Answers (0)

adilei on at

Like (2)

Report

Yes, you would want a second app registration for the custom canvas. Here are the instructions: Configure single sign-on with Microsoft Entra ID - Microsoft Copilot Studio | Microsoft Learn

Was this reply helpful? Yes No
anonymous882 on at

Like (1)

Report

@adilei Thank you for your help, I was able to configure it but now I have two log in prompts like shown in the documentation, I thought by configuring front end app registration it will sync with the back end one and fetch the token from authentication and avoid that login request from the bot. Is there a way to solve this issue as documentation does not offer a solution.

Was this reply helpful? Yes No
adilei on at

Like (2)

Report

The sample is a bit tricky, as it starts the conversation before the user is signed-in. From the image, it seems you are signed-in, but can't be sure.

Otherwise, it's possible that some misconfiguration makes copilot studio reject the token. How did you set up your canvas app registration in terms of permissions?

Was this reply helpful? Yes No
anonymous882 on at

Like (1)

Report

@adilei As per documentation, I granted the app Delegate User.Read permissions. I am signed in but still have the log in prompt from copilot studios.

From my understanding, if the user is signed in using MSAL the sign in from the copilot studios should be bypassed? or would I have to turn off manual authentication from copilot studios's side or simply change the sample code to prompt the sign in first and then start the conversation?

Was this reply helpful? Yes No