We have a .NET application that runs on a physical workstation at an office. Historically we only have the user login to OUR software and then we lookup their phone switch login and automatically log them ON/OFF through the API behind the scenes.
It appears to me based on my research so far that I will NOT be able to do this with the PureCloud system. I will need to direct the user to the PureCloud web based login screen to log them ON, and best practice is to direct the user to the PureCloud web based logoff screen to log them OFF (because it cleans up cookies and stuff).
Before I hit my boss with this as fact I would like to verify that it is indeed a fact. There is not a way to log a user (phone agent) ON/OFF to the PureCloud phone system automatically through the API? We must have them enter their login credentials on your web based login screen?
The only way a user can authorize an app without using the PureCloud login screen is if the app implements the SAML2 Bearer Grantand the SAML provider you're using is capable of providing the SAML assertion without prompting the user.
Otherwise, you're correct that using the implicit or auth code grant will require the user to interact with a browser. We provide an open source .NET control you can use in your app that will handle the browser and authorization flow for you and provide the resulting auth token that you can then pass to the SDK. https://www.nuget.org/packages/PureCloudOAuthControl/
Fair warning that doing this constitutes mishandling user credentials and is a misuse/abuse of the platform and can result in your org being suspended. Do not do this. A human is required to interact with the login screen when authorizing an app as a user.
Thanks Tim, that's the information I needed. And to clarify the situation our current software design automatically logs users ON/OFF our current phone switch NOT the new PureCloud Genesys phone switch that we are in the process of integrating to. Over 20 years we have integrated our application to about 6 different phone switches and this will be the first time our users will have to login separately to the phone switch. This is why I wanted to explicitly make sure before we did any work because we have never had to do this before and it changes both our application flow and our operations flow.