Table of Contents

Introduction

This guide explains how to configure SphereShield app for Webex (Teams) and Webex Meeting.

You can install one or both of them depending on your business requirements.

Most steps are identical. When there is a difference, you will see info in the relevant step.

High level process steps

Verify you have Admin Portal URL in hand (received from AGAT support)
Create an Integration application in the Webex Developer Portal
Register the Webex App in the Admin Portal

Detailed Steps

Create an Integration application in the Webex Developer Portal

...

Login to admin webex - https://admin.webex.com/manage-users/users with a service account. Note: this has to be a separate account from your main admin account, since it is not possible to assign "Compliance officer" role to yourself. It needs to be assigned a different account.
In the Profile tab click on the admin line:
Image Removed

...

Set the user to have a Compliance Officer and Full administrator privileges:

...

Login to Webex Development: https://developer.webex.com/ with the user created above.

...

Click on Start Building Apps button:

...

Click Create an Integration
Image Removed
Select Integration as a new app type:
Image Removed

...

Fill in all the required settings. Integration Name should be simply "SphereShield". The icon should be the SphereShield logo. Contact email should be support@agatsoftware.com
Image Removed

The important setting here is the Redirect URL. You should enter your Access Portal URL (provided by AGAT) with the addition of /account/webexauth suffix.

Example for Fiji: https://ap.fiji.agat.world/account/webexauth

...

Select the following scopes for Webex Teams:

meeting:recordings_read
meeting:admin_recordings_read
spark-admin:people_read
spark-admin:resource_group_memberships_read
spark-admin:resource_groups_read
spark-compliance:events_read
spark-compliance:memberships_read
spark-compliance:team_memberships_read
spark-compliance:teams_read
meeting:admin_schedule_read (scope needed to request meeting title for eDiscovery purpose)
meeting:admin_schedule_write (scope needed for sending meeting invitee to make Compliance officer as CoHost in scheduled meeting)
meeting:participants_write (scope needed for being able to expel users from scheduled meeting)
meeting:admin_participants_read (scope needed to create “meetingParticipants” webhook)
meeting:controls_read (scope needed to be able to request meeting recording state)
meeting:controls_write (scope needed to be able to change meeting recording state)
meeting:admin_preferences_write(scope needed to be able to make Compliance officer as CoHost in PMR meeting)
spark-compliance:meetings_write (scope needed for beeing able to get ended meeting chats )
spark-compliance:meetings_read(scope needed for beeing able to get ended meeting chats )
spark-admin:calls_write (might require escalation to Webex Support) (Note: The following scopes from the above list may not exist: spark-admin:call_memberships_read, spark-admin:calls_read, spark-admin:calls_write)

9. Click Add Integration button

It also possible to click all of the required scopes with a custom JavaScript. For this you need to have the Create new integration page open. While you’re on that page open browser developer tools, I’ll use Firefox as an example. It’s very similar in Chrome (Ctrl + Shift + C in Firefox and Chrome):

...

And paste the following code in this area:

...

Info
Note: as shown in the screenshot above you may need to type in “allow pasting” (without quotes) to be able to paste code into the dev tools console.

Code:

Code Block

language	js

try {
    let requiredScopes
} catch (e) {
    console.log("variable already declared")
    console.log(e)
}

if (typeof requiredScopes === 'undefined') {
    console.log("defining scopes")
    requiredScopes = [
        "spark:all",
        "spark-admin:call_memberships_read",
        "spark-admin:calls_read",
        "spark-admin:licenses_read",
        "spark-admin:organizations_read",
        "spark-admin:people_read",
        "spark-admin:people_write",
        "spark-admin:resource_group_memberships_read",
        "spark-admin:resource_group_memberships_write",
        "spark-admin:resource_groups_read",
        "spark-admin:roles_read",
        "spark-admin:call_qualities_read",
        "spark-compliance:events_read",
        "spark-compliance:memberships_read",
        "spark-compliance:memberships_write",
        "spark-compliance:messages_read",
        "spark-compliance:messages_write",
        "spark-compliance:rooms_read",
        "spark-compliance:team_memberships_read",
        "spark-compliance:team_memberships_write",
        "spark-compliance:teams_read",
        "meeting:admin_schedule_read",
        "meeting:admin_schedule_write",
        "meeting:participants_write",
        "meeting:admin_participants_read",
        "meeting:controls_read",
        "meeting:controls_write",
        "meeting:admin_preferences_write",
        "spark-compliance:meetings_write",
        "spark-compliance:meetings_read",
        "spark-admin:calls_write"
    ]

}

for (scope of requiredScopes) {
    let validScope = scope.replace(":", "\\:")
    
    try {
        element = document.querySelector(`input[id*=${validScope}]`)
        if (!element.checked) {
            console.log(`Clicking ${validScope}`)
            element.click()
        }
    } catch (e) {
        console.log(`couldn't find element ${scope}`)
        console.log(e)
    }
}

Code that also includes Meetings:

Code Block

language	js

try {
    let requiredScopes
} catch (e) {
    console.log("variable already declared")
    console.log(e)
}

if (typeof requiredScopes === 'undefined') {
    console.log("defining scopes")
    requiredScopes = [
        "spark:all",
        "spark-admin:call_memberships_read",
        "spark-admin:calls_read",
        "spark-admin:licenses_read",
        "spark-admin:organizations_read",
        "spark-admin:people_read",
        "spark-admin:people_write",
        "spark-admin:resource_group_memberships_read",
        "spark-admin:resource_group_memberships_write",
        "spark-admin:resource_groups_read",
        "spark-admin:roles_read",
        "spark-admin:call_qualities_read",
        "spark-compliance:events_read",
        "spark-compliance:memberships_read",
        "spark-compliance:memberships_write",
        "spark-compliance:messages_read",
        "spark-compliance:messages_write",
        "spark-compliance:rooms_read",
        "spark-compliance:team_memberships_read",
        "spark-compliance:team_memberships_write",
        "spark-compliance:teams_read",
        "meeting:admin_schedule_read",
        "meeting:admin_schedule_write",
        "meeting:participants_write",
        "meeting:admin_participants_read",
        "meeting:controls_read",
        "meeting:controls_write",
        "meeting:admin_preferences_write",
        "spark-compliance:meetings_write",
        "spark-compliance:meetings_read",
        "spark-admin:calls_write",
        "meeting:recordings_read",
        "meeting:admin_recordings_read"
    ]

}

for (scope of requiredScopes) {
    let validScope = scope.replace(":", "\\:")
    
    try {
        element = document.querySelector(`input[id*=${validScope}]`)
        if (!element.checked) {
            console.log(`Clicking ${validScope}`)
            element.click()
        }
    } catch (e) {
        console.log(`couldn't find element ${scope}`)
        console.log(e)
    }
}

Just the Meetings:

...

language	js

...

Table of Contents

Introduction

This guide explains how to configure SphereShield app for Webex (Teams) and Webex Meeting.

You can install one or both of them depending on your business requirements.

Most steps are identical. When there is a difference, you will see info in the relevant step.

High level process steps

Verify you have Admin Portal URL in hand (received from AGAT support)
Create an Integration application in the Webex Developer Portal
Register the Webex App in the Admin Portal

Detailed Steps

Create an Integration application in the Webex Developer Portal

Login to admin webex - https://admin.webex.com/manage-users/users with a service account. Note: this has to be a separate account from your main admin account, since it is not possible to assign "Compliance officer" role to yourself. It needs to be assigned a different account.
In the Profile tab click on the admin line:
Image Added
Set the user to have a Compliance Officer and Full administrator privileges:
Image Added
Login to Webex Development: https://developer.webex.com/ with the user created above.
Click on Start Building Apps button:
Image Added
Click Create an Integration
Image Added
Select Integration as a new app type:
Image Added
Fill in all the required settings. Integration Name should be simply "SphereShield". The icon should be the SphereShield logo. Contact email should be support@agatsoftware.com
Image Added
The important setting here is the Redirect URL. You should enter your Access Portal URL (provided by AGAT) with the addition of /account/webexauth suffix.
Example for Fiji: https://ap.fiji.agat.world/account/webexauth
Note that the redirect URL is case sensitive.
Select the following scopes for Webex Meeting:
- meeting:recordings_read
- meeting:admin_recordings_read
- spark-admin:people_read
- spark-admin:resource_group_memberships_read
- spark-admin:resource_groups_read
- spark-compliance:events_read
- spark-compliance:memberships_read
- spark-compliance:team_memberships_read
- spark-compliance:teams_read
- meeting:admin_schedule_read (scope needed to request meeting title for eDiscovery purpose)
- meeting:admin_schedule_write (scope needed for sending meeting invitee to make Compliance officer as CoHost in scheduled meeting)
- meeting:participants_write (scope needed for being able to expel users from scheduled meeting)
- meeting:admin_participants_read (scope needed to create “meetingParticipants” webhook)
- meeting:controls_read (scope needed to be able to request meeting recording state)
- meeting:controls_write (scope needed to be able to change meeting recording state)
- meeting:admin_preferences_write(scope needed to be able to make Compliance officer as CoHost in PMR meeting)
- spark-compliance:meetings_write (scope needed for beeing able to get ended meeting chats)
- spark-compliance:meetings_read(scope needed for beeing able to get ended meeting chats)
- spark-admin:calls_write (might require escalation to Webex Support) (Note: The following scopes from the above list may not exist: spark-admin:call_memberships_read, spark-admin:calls_read, spark-admin:calls_write)

9. Click Add Integration button

It also possible to click all of the required scopes with a custom JavaScript. For this you need to have the Create new integration page open. While you’re on that page open browser developer tools, I’ll use Firefox as an example. It’s very similar in Chrome (Ctrl + Shift + C in Firefox and Chrome):

...

And paste the following code in this area:

...

Info
Note: as shown in the screenshot above you may need to type in “allow pasting” (without quotes) to be able to paste code into the dev tools console.

Code:

Code Block

language	js

let webexMeeting = [
    "meeting:recordings_read",
    "meeting:admin_recordings_read",
    "spark-admin:people_read",
    "spark-admin:resource_group_memberships_read",
    "spark-admin:resource_groups_read",
    "spark-compliance:events_read",
    "spark-compliance:memberships_read",
    "spark-compliance:team_memberships_read",
    "spark-compliance:teams_read",
    "meeting:admin_schedule_read",
    "meeting:participants_write",
    "meeting:admin_participants_read",
    "meeting:controls_read",
    "meeting:controls_write",
    "meeting:admin_preferences_write",
    "spark-compliance:meetings_writ",
    "spark-compliance:meetings_read",
    "spark-admin:calls_write"
]

function clickCheckBoxes(scopeList) {

    for (let scope of scopeList) {
        scope = scope.replace(":", "\\:")

        try {
            element = document.querySelector(`input[id*=${validScopescope}]`)
            if (!element.checked) {
                console.log(`Clicking ${validScopescope}`)
                element.click()
            }
        } catch (e) {
            console.log(`couldn't find element ${scope}`)
            console.log(e)
        }
    }
}

clickCheckBoxes(webexMeeting)

Register the Webex App in the Admin Portal

...

Copy all the text in OAuth Authorization URL field (black box):
Image RemovedImage Added

(can be easily done by 3 left clicks on the black box text to select all the URL and Ctrl+C to copy)
Paste it into a new tab of Chrome (recommends to use incognito) in the address line and press Enter:
Accept the required permissions:

4. You will be redirected to the Admin Portal Webex App Configuration page ([adminPortalURL]/account/webexauth):
Image Removed

...

Enter the settings from Webex App: Client ID, Client Secret, Integration ID
In External Portal Web API URL enter your AP external URL,

...

like https://

...

env29.

...

agatcloud.com

Info
Note that here it comes without any suffix, just the site base URL.

After clicking the Save button, the Admin Portal will try to connect to the configured Webex App and if it succeeds you will see the following page:

...

5. Now the Webex App is configured, and you can review the settings in the Cloud Services Integration settings page : Webex Teams alone

...

Webex Meetings alone

...

Both Webex

...

:

...

Reconfiguring Existing Environment

...

Version	Old Version 3	New Version Current
Changes made by	Agat Support	Agat Support
Saved on	Nov 14, 2022	Nov 21, 2022

Versions Compared

Key

Introduction

High level process steps

Detailed Steps

Create an Integration application in the Webex Developer Portal

Introduction

High level process steps

Detailed Steps

Create an Integration application in the Webex Developer Portal

Register the Webex App in the Admin Portal

Reconfiguring Existing Environment

Page Comparison

Versions Compared

Key

Introduction

High level process steps

Detailed Steps

Create an Integration application in the Webex Developer Portal

Introduction

High level process steps

Detailed Steps

Create an Integration application in the Webex Developer Portal

Register the Webex App in the Admin Portal

Reconfiguring Existing Environment