Migrating from ClientSecret to Dialogue Cloud Certificate Authentication
Warning
Renewing a ClientSecret for SharePoint access is a temporary measure until deprecation of the entire AACS Azure Acces Control Services (AACS), a deprecating authentication service of Microsoft Azure used to connect to (among other services) SharePoint online. In the past this was often abbreviated to ACS. Not to be confused with the similarly named and newer acronym ACS (Azure Communication Services). authentication model by Microsoft in April 2026. For more information see Microsoft announcement on: https://aka.ms/retirement/acs/support. Beyond that date Dialogue Cloud or any other AnywhereNow application or script will not be able to access your SharePoint sites anymore, to read changes, or write/upload list items or files.
Prior to that date, please migrate all your UCC A Unified Contact Center, or UCC, is a queue of interactions (voice, email, IM, etc.) that are handled by Agents. Each UCC has its own settings, IVR menus and Agents. Agents can belong to one or several UCCs and can have multiple skills (competencies). A UCC can be visualized as a contact center “micro service”. Customers can utilize one UCC (e.g. a global helpdesk), a few UCC’s (e.g. for each department or regional office) or hundreds of UCC’s (e.g. for each bed at a hospital). They are interconnected and can all be managed from one central location. sites to using AppOnly/Certificate authentication as advised by both Microsoft and AnywhereNow. See: Migrating from ClientSecret to Dialogue Cloud Certificate Authentication
Preferably, create new standalone sites per UCC (as Microsoft and AnywhereNow recommends), use our OneUCC Available since UCC.Creator v8.2.0.7. The model (preferred by Microsoft) in SharePoint on Microsoft 365 where no subsites are allowed. In this model each UCC will need its own separate SharePoint site (formerly known as site collection). This does allows for more granular user access and template updates per UCC. model, and reconfigure your UCC's to use these new sites. See: Creating a OneUCC Site using PnP.PowerShell
Introduction
If you are using Sharepoint Online (i.e. not SharePoint Server in your own datacenter) each UCC has its own UCC Site in SharePoint Online. Each UCC Site in SharePoint Online needs a connection from your UCC server. Authentication from your UCC server to your SharePoint Online UCC Sites was initially only possible through Azure Access Control Service (AACS) with ClientID and ClientSecret credentials. Later a Microsoft EntraID AppOnly with Certificate mechanism has been added by Microsoft and subsequently by AnywhereNow. AACS is getting phased out for use as authentication method by Microsoft starting November 2024 (for new customers) and ending ultimately by April 2026 (for existing customers) the preferred and hence only supported method for authentication to a SharePoint Online site by an Application is through AppOnly and a certificate.
Also see announcement on: Learn More
In order to migrate SharePoint Ucc.Creator authentication from ClientId and ClientSecret (aka AppId and AppSecret) to Dialogue Cloud AppOnly with certificate authentication, take the following three steps:
-
Convert the Microsoft Entra ID Formerly known as Azure Active Directory (or Azure AD, or AAD) App currently enabled for AACS to AppOnly/Certificate authentication.
Follow the steps in Step 3, Option 2 on: Option 2: Generate Microsoft Entra ID App-Only App, Certificate and Consent for the AnywhereNow Ucc.Creator -
Change the Authentication method of each UCC by reconfiguring the UCC config.xml file to reflect the new authentication method.
Follow the steps from Option 7 in: SharePoint Online App-Only, Certificate and Thumbprint -
Restart the UCC Service(s) with a clean cache to reload all SharePoint UCC information using the new authentication method.
Follow the steps from Option 2 on: Restart the UCC with a clean cache?
What else do I need to do?
After the authentication change do not forget to apply the new method to any other application you may have accessing the SharePoint UCC Sites.
Examples are:
-
UCC.Creator script for new UCC sites need to be built
-
Dialogue Studio (specific flows which need to read specific settings or audiofiles/recordings/QM)
-
Copy Settings scripts if migrating to the OneUCC SharePoint model
Need help?
Our Professional Services are able to help getting started or guide you through the entire process. For more information see: AnywhereNow Professional Services