Skip to content

Post-install checklist

import { Steps } from “@astrojs/starlight/components”;

After deployment completes, run through this checklist. Steps 1 and 2 are security-relevant — do them right away.

  1. Set your admin key.

    A fresh deployment has no admin key, so the dashboard is open to anyone who knows the hostname. Open https://{your-customer-fa}.azurewebsites.net/api/dashboard, click Rotate admin key in the Settings panel, and save the key it shows (it’s shown once). From now on the dashboard requires it: .../api/dashboard?code=<admin-key>. Bookmark it. Details →

  2. Confirm the dashboard loads with the key.

    Reopen the dashboard with ?code=<admin-key>. You should see a page with active session count (0), cost (=$0), and your plan + seat tile.

  3. Set up Teams SSO + sideload the Teams app.

    Create the AAD app and have its values set on your stack (Teams app setup — a one-time script run plus a support request). Then, from the dashboard footer, click Teams setup. Step 2 downloads a per-deployment .zip. Upload it in Teams Admin CenterManage appsUpload new app, set it to Allowed, and pin it via Teams apps → App setup policies → Global so your agents see the tab automatically.

  4. Set the AI system prompt (optional but recommended).

    Tell the assistant who you are, what your product is, and what tone to use. If you didn’t set it in the deploy wizard, it currently takes a support request to change — so it’s worth getting right at deploy time.

  5. Tighten allowedOrigins.

    If you set * during the wizard for evaluation, replace it with your real domain list before pointing production traffic at the widget. Changing it after install currently requires a support request — another setting worth getting right in the wizard.

Smoke test the chat

Open your website (or any page with the widget script tag) in an Incognito window. Click the chat bubble; send a message. The assistant should respond within a few seconds. Open the dashboard — you should see 1 active session.

In Teams, open the PointOfContactAI tab. The session appears in the queue. Click Claim. Send a message from the agent side; the visitor sees it in real time.

If any of the above doesn’t work, see Troubleshoot.