Login to VRS | Expertflow CX

VRS users can log in to VRS using their login credentials defined in Keycloak. When integrated with Cisco Finesse, the users must specify Cisco login credentials. When the VRS is embedded in Cisco Finesse, the agent is automatically logged in to the VRS. VRS uses Keycloak for centralized IAM (Identity and Access Management) functions. All application users' roles are defined in Keycloak.

See User Permissions for more details on user authorization with VRS.

Login Options	Description
Standalone Application Login	The users can log in using their KeyCloak credentials. The user authentication request is redirected to Keycloak for request verification. Upon confirmation, users get logged in to the VRS with access to the permitted resources.
VRS is embedded as a Cisco Finesse Gadget	Once users log in to Cisco Finesse, they are automatically logged in to the VRS. Auto-login to the application is supported in non-SSO environments. When users log in, their login details are synchronized with KeyCloak with the default role of agent, so that the user profiles also get created in KeyCloak with the same credentials as Cisco. Upon login, users are allowed to log in to the VRS with restricted access to the application resources.

Login Options

Description

Standalone Application Login

The users can log in using their KeyCloak credentials.
The user authentication request is redirected to Keycloak for request verification. Upon confirmation, users get logged in to the VRS with access to the permitted resources.

VRS is embedded as a Cisco Finesse Gadget

Once users log in to Cisco Finesse, they are automatically logged in to the VRS. Auto-login to the application is supported in non-SSO environments.
When users log in, their login details are synchronized with KeyCloak with the default role of agent, so that the user profiles also get created in KeyCloak with the same credentials as Cisco. Upon login, users are allowed to log in to the VRS with restricted access to the application resources.

For standalone application login, the browser encrypts the username and password before they are sent to VRS. Encryption uses RSA-OAEP and includes a one-time nonce that expires quickly (about 60 seconds) and can be used only once.

As a result, login credentials do not appear in plaintext in browser DevTools or network captures, and a copied login request cannot be replayed to sign in again.

This applies to the VRS login screen. Finesse gadget auto-login continues to use the embedded Finesse flow described above.

Secure login (encrypted credentials)