Authenticated web messaging allows only authenticated users to start a web messaging session with your agents. These users must log in to your website or your application before they can send a web message.

To enable authenticated web messaging, follow these steps:

1. Create or configure an authentication server (an OpenID provider).
   Note: The authentication server configuration depends on the provider. This step results in a Discovery URI and Client credentials (client-id and client-secret) that you need in the next step. During this configuration, Genesys recommends that you create a separate client-id for integration into Genesys.
2. Create an OpenID Connect Messenger Configuration integration. To create the integration, perform the following steps:
   1. Click Admin.
   2. Under Integrations, click Integrations.
   3. Click Menu > IT and Integrations > Integrations.
   4. The List of Integrations page displays.
      Note: The Set-up an Integration here link in the Messenger configuration is a shortcut to the Integrations view. If you don’t see the OpenID Connect Messenger Configuration object, you can add it to your list of Integrations by clicking Integrations. Use the search box to locate and install the OpenID Connect Messenger Configuration object.
   5. Locate the OpenID Connect Messenger Configuration tile and click it.
   6. The Details tab is displayed by default. Click the Configuration tab.
      1. In the Property Name section, enter the values in the Discovery URI and Max Refresh Token Lifetime fields. The following screenshot demonstrates an OpenID Connect Messenger integration configuration. Click the image to enlarge.

         

         The following screenshot shows the maximum refresh token lifetime configuration. In the Max Refresh Token Lifetime box, you can assign any value between 15 minutes to 90 days in seconds format. Click the image to enlarge.
      2. Genesys Cloud supports implicit grant type flows to provide a seamless authentication experience. When you enable this authentication type, you can also define the maximum lifetime for the implicit flow access token. To configure the implicit grant type flow, perform the following steps:
         1. In the Implicit Auth Type drop-down, select True.
         2. In the Max Implicit Flow Token Lifetime field, enter a value in seconds (between 15 minutes and 24 hours). Click the image to enlarge.
      3. In the Credentials section, click Configure.
         1. The Configure Credentials dialog box is displayed. In the Client ID field, enter the Client ID received from the OAuth provider.
         2. In the Client Secret field, enter the client secret received from the OAuth provider.
         3. Click OK.
            Note: If you want to change these details again, click Change and perform the same steps.
   7. Click Save.
3. Navigate to the Messenger configuration page and click enable Authentication.
   1. In the Authentication area of the configuration, select the OpenID Connect Messenger Configuration integration. For more information, see Configure Messenger.
   2. Create and save a Messenger deployment.
4. Assign this Messenger configuration to your deployment.  
5. Copy the code snippet from this deployment to the website pages where you want Messenger to appear, or use a Tag Manager tool to deploy it. 
6. To deploy Messenger to your mobile platform (custom mobile messenger), configure the deployment domain and ID in the Transport SDK.