WebChat supports sharing a user's access token over Direct Line. This allows the agent to "act on behalf of the user", by passing the token to a downstream API.
This pattern requires the application hosting WebChat to obtain an access token using a library like MSAL (or equivalent for non-Entra providers), and post it over Direct Line.
Important
AI-generated answers from SharePoint and Graph Connector data sources are not available to Guest users in SSO-enabled apps.
| Sample Name | Description | View |
|---|---|---|
| SSOwithEntraID | SSO on Web with Entra ID | View |
| 3rdPartySSOWithOKTA | Demonstrates how to implement a seamless SSO experience with a 3rd party authentication provider | View |
| SharePointSSOComponent | A SharePoint component demonstrating how copilots can be deployed to SharePoint sites with SSO enabled | View |
| CopilotStudioChatAPI | Direct integration with Copilot Studio Chat API (experimental) using SSO and streaming responses | View |