I created a new copilot

I named the copilot "Blog Site Copilot"

The copilot was setup

"On Unknown Intent" the "Conversational boosting" Topic will generate an answer based on the contents of https://haddley.github.io (the Data source).

To test the Copilot I asked the question "What is Docker?"

I added a Message to display "System.Activity.Text"

Now the text provided by the user is echoed back to them before the generated answer is displayed

Restarting the session displays the message specified in the "Conversation Start" Topic

I clicked the Publish|Go to Channels link

"Because you chose Teams Authentication, only Teams channel is available. To use other channels, change your authentication settings. Go to authentication settings."

I clicked on the Security menu item

I clicked on the Authentication tile

The "Only for Teams and Power Apps" authentication option is selected (by default).

Notice that a "Blog Site Copilot (Power Virtual Agents)" application registration was automatically created in Azure.

I selected the No authentication option

I clicked the Save button

I clicked the Copy button

I navigated to https://web.powerva.microsoft.com/environments/b838e044-3024-ea32-b2f4-7862b85e9903/bots/cr74e_blogSiteCopilot/canvas?__version__=2

I navigated to the Publish tab and clicked the Publish button

I clicked the Publish button

I returned to the demo website and asked the question "What is NGRX?"

The Canvas App Registration has a Web Redirect URI https://delightful-moss-0ad02620f.5.azurestaticapps.net/

The Access tokens and ID tokens options are both checked

The Canvas App Registration has a generated Client secret

The Canvas App Registration Overview

The Authenticated App Registration has a Web Redirect URI https://token.botframework.com/.auth/web/redirect

Notice that the Redirect URL can be copied from the Copilot Studio Security|Authentication page

The Access tokens and ID tokens options are both checked

The Authenticated App Registration has a generated Client secret

The Authenticated App Registration includes a scope. The Authenticated App is configured to trust the Canvas App Registration. Notice that the Canvas App Client ID "ff20..." has been added.

The Authenticated App Registration includes scope: api://69552d8b-12ac-4e44-96a6-1dc285405aa5/Readfiles

The Authenticated App Registration Overview

Notice that the Authenticated The Authenticated App Registration Client ID and Client Secret have been added to the Copilot Studio Security|Authentication page. The "api://6955..." scope has been added to the Copilot Studio Security|Authentication page.

Code is from https://github.com/microsoft/CopilotStudioSamples/blob/master/BuildYourOwnCanvasSamples/3.single-sign-on/index.html

Static Web App has URL https://delightful-moss-0ad02620f.5.azurestaticapps.net

To get this example to work I needed to load the web page and to click the "log in" button (promptly).

Whoami Topic

This part of the code posts a "signin/tokenExchange" message to the Copilot (avoiding the need for the web page logged in user to login to the Copilot themselves).