Set up trusted media domains for secure file upload

Virtual Agent uses trusted media domains to check the URLs of attachment files before uploading them. If a URL is not from a trusted domain, Virtual Agent will not upload the attachment.

始める前に

Role required: admin

このタスクについて

For custom chat integrations, specify trusted media domains in either the Provider [sys_cs_provider] table or the Provider Channel Identity [sys_cs_provider_application] table. The trusted media domain values in the Provider Channel Identity table override the corresponding values in the Provider table.

Pre-built integrations, such as Slack, Microsoft Teams, and Workplace from Facebook, have default trusted media domain values set at the provider level, in the Provider [sys_cs_provider] table. To change the default trusted values, specify the different trusted media domains in the Provider Channel Identity [sys_cs_provider_application] table.

手順

1. Navigate to All > sys_cs_provider_application.list > Provider Channel Identity and click New.
2. On the form, fill in the fields.

   表 : 1. Provider Channel Identity form

   Name	Name of the channel identity. For example: VA SMS Twilio Adapter
   Provider	Select the name of your provider application that you set up previously. For example: VA SMS Twilio Adapter Pro.
   Message auth	Message authentication for the channel identifier.
   Inbound ID	Identifier for your bot. For example, the phone number.
   Trusted media domains	Comma-separated list of one or more trusted domains for the provider. For example: twilio.com, slack.com 注: Subdomains under a trusted domain are also trusted. You do not need to specify subdomains in this list. If this field is not visible, you can configure the form layout to show it. For security reasons, Virtual Agent checks that the URLs for attachments in conversations are from trusted domains specified here. If the URL is not for a trusted domain, Virtual Agent doesn't upload the attachment. If an attachment upload fails because Virtual Agent didn't trust the domain, Virtual Agent does not inform the end user why the attachment upload failed. 注: For Trusted Domains In custom chat integrations, the values specified in the Trusted media domains field of the Provider Channel Identities table [sys_cs_provider_application] takes precedence over the Connections table [sys_cs_provider] and hence overrides.
   Short description	Description for your channel identifier.

3. Click Submit.
4. オプション: Create additional channel identifiers using the same procedure.