Yes. I was aware, thanks.
My issue is that Web Messaging uses this Restrict Genesys Cloud Embedding organisation setting to determine whether to render the web messaging deployment. Because these are stored as cookies on the local machine, it means ANY web messaging deployment in the same region and not just my organisation, is affected.
Original Message:
Sent: 04-28-2025 09:00
From: Egill Pálsson
Subject: Restrict Genesys Cloud Embedding & Web Messaging Deployment
Hi Angus, I do not know if this might be applicable to your case. But recently I had a similar experience and support told me that there was a bug in the UI that didn't allow wildcards to be added. But it can be done using the API instead. And it did work for me at least :)
For example:
PATCH /api/v2/organizations/authentication/settings
{
"multifactorAuthenticationRequired": false,
"domainAllowlist": [
"*.salesforce.com",
"*.force.com"
]
}
------------------------------
Egill Pálsson
IT Specialist, IP Telephony
Original Message:
Sent: 04-27-2025 19:36
From: Angus Huckle
Subject: Restrict Genesys Cloud Embedding & Web Messaging Deployment
Another support Zoom call. Three Genesys employees on it this time. Showed the issue. Thought they understood it, but then they quoted the same, out of date, Resource Centre page. They say they tested the solution it but when I do exactly as they ask, it doesn't solve the issue.
I've given feedback on the article itself as well - https://help.mypurecloud.com/articles/manage-genesys-cloud-embedding-with-the-genesys-cloud-embedded-clients/ - which tells you to use wildcard e.g. *.salesforce.com, but the UI no longer accepts these.
This is supposedly the problem - wildcards. It's not. It still happens when you have a non-wildcards domain in there such as salesforce.com.
------------------------------
Angus Huckle
Procurement
Original Message:
Sent: 03-26-2025 16:57
From: Angus Huckle
Subject: Restrict Genesys Cloud Embedding & Web Messaging Deployment
I posted this on the old developer forum, but can't find it here so I'll do it again.
Was looking to see if anyone had looked at it because I am not getting any joy from support.
This is a bit of an edge case but if a user logs into Genesys Cloud using a browser e.g. Chrome, and that Organisation has domains set as part of the Restrict Genesys Cloud Embedding organisation settings, if this user then at some point in the future, unrelated to their use of Genesys Cloud, uses the same browser to navigate to a web site that uses Genesys Web Messaging, the messenger will not display unless that other web site's domain is listed in the Genesys Cloud organisation settings. This could be any web messaging deployment which is part of any Genesys Cloud install - not the one they originally logged into.
This appears to be because the use of Restrict Genesys Cloud Embedding creates/extends a cookie with values such as: GENESYS-Domain-List and __Secure-GENESYS-Domain-List.
The web messaging code seems to reference these cookies and will not render on the other web site. It is blocked due to CSP (Content Security Policy).
Given that messenger deployments have their own mechanism to restrict domains, I don't see why these cookies should be referenced by web messaging as well.
The response I have been given is that I must list all the relevant web sites in the organisation settings. I.e. any website that may have Web Messenger deployed from anywhere in the world.
@Angelo Cicchitto Does this make sense to you?
#EmbeddableFramework
#WebMessaging
------------------------------
Angus Huckle
Procurement
------------------------------