Table of Contents

Setting up Content Security Policy (CSP)

Niamh Ferns Updated by Niamh Ferns

Content Security Policy for Teams App

As in Microsoft Teams, tab applications are hosted within iframe elements in Microsoft 365 apps and the Outlook web client.

DeskDirector makes use of Content Security Policy (CSP) headers as a security measure that helps prevent attacks. It is necessary to configure the frame-ancestors settings in your DeskDirector Admin Portal. This should include the Authentication Portal, Client Portal, and TECH Portal.

Read about the Content-Security-Policy in DeskDirector.

Setup - Method One

  1. To set up the required configuration automatically, you can go to your Admin Portal and open Integrations > Teams.
  2. In the Embedding Configuration section, open the drop-down menu and click on the "Enable Client Portal" and "Enable TECH Portal" options.
  3. This will automatically add an allow-list to your CSP configuration (the full list of the domains is at the end of this article).

Setup - Method Two

Instructional Video

Step-through:

13 STEPS

1. The first step is to open DeskDirector Admin Portal

Step 1 image

2. Scroll and click System

Step 2 image

3. Click Security

Step 3 image

4. Click TECH Portal

Step 4 image

5. Open support.deskdirector and click highlight

Step 5 image

6. Open demomsp29.deskdirector and click frame-ancestor-domain

Step 6 image

7. Click Allow Embed

Step 7 image

8. Open support.deskdirector and click https://teamsapp.deskdirector.com

Step 8 image

9. With your mouse, select text in https://teamsapp.deskdirector.com

Step 9 image

10. Open demomsp29.deskdirector and click frame-ancestor-domain

Step 10 image

11. Click Allow Embed

Step 11 image

12. Click Save

Step 12 image

13. That's it. You're done.

Step 13 image

** Best experienced in Full Screen (click the icon in the top right corner before you begin) **

https://www.iorad.com/player/2159323/Teams---set-up-CSP-Security

Required Settings

Host

frame-ancestor permission

DeskDirector app

https://teamsapp.deskdirector.com

Microsoft Teams

https://teams.microsoft.com

https://*.teams.microsoft.com

https://*.skype.com

Microsoft 365 app

https://*.microsoft365.com

https://*.office.com

https://*.cloud.microsoft

Microsoft Outlook

https://outlook.live.com

https://outlook.office.com

https://outlook.office365.com

https://outlook-sdf.office.com

https://outlook-sdf.office365.com

Further Reading

How did we do?

Contact Groups Integration with Microsoft Teams

Advanced topic: Setting up Tech & Client Mode in the same tenancy

Contact