Website calling widget and main IVR
Deploy the approved-origin widget, create short-lived guest sessions, call the XC account IVR and control presence, audio and error handling.
xConnect
Open guide →GuideUnderstand the xConnect website widget
Provide approved website visitors with a secure browser call to the account IVR.
Open guide →GuideReview the widget account
Use the generated XC account code and display name.
Open guide →GuideConfigure approved website origins
Allow only exact normalised origins configured for the customer/account.
Open guide →GuideCopy the widget snippet
Copy the generated script once before the closing body tag.
Open guide →GuideAvoid duplicate widget installation
Insert the snippet once per page/template to prevent duplicate controls and sessions.
Open guide →GuideCreate a website visitor session
Allow the widget to submit account, origin, IP and optional visitor name for validation.
Open guide →GuideUnderstand guest extensions
Use a short-lived generated guest SIP identity for the visitor session.
Open guide →GuideUnderstand widget access-token storage
Recognise that the access token is returned transiently and stored one-way as a hash.
Open guide →GuideUnderstand transient SIP credentials
Recognise that the generated SIP password is returned only for the active session and stored encrypted.
Open guide →GuideUnderstand widget session lifetime
Use the configured bounded expiry and heartbeat; expired sessions are disabled.
Open guide →GuideUnderstand passive presence
Allow registration/heartbeat without requesting microphone access.
Open guide →GuideGrant microphone access for calls
Request browser microphone permission when the visitor starts or answers a call.
Open guide →GuideCall the account IVR
Use the widget call action to create an authorised call from the guest to the account route.
Open guide →GuideUse the main IVR
Listen to the prompt and enter the desired extension, with 0/no-input fallback where configured.
Open guide →GuideAnswer a website call
Use Answer when an authorised incoming website call is presented.
Open guide →GuideDecline a website call
Use Decline and record the outcome.
Open guide →GuideMute a website call
Toggle the microphone during the active call.
Open guide →GuideEnd a website call
Select End and allow the widget to hide/reset after completion.
Open guide →GuideSend website DTMF
Use keypad digits to navigate the IVR or in-call options.
Open guide →GuideUpdate website visitor presence
Use online heartbeats and page-exit offline updates.
Open guide →GuideUnderstand per-IP rate limiting
Recognise the configured per-minute request/session limit.
Open guide →GuideUnderstand concurrent visitor limits
Recognise the configured maximum active website sessions/calls.
Open guide →GuideUnderstand widget CORS behaviour
Use PUT/OPTIONS from HTTPS origins or permitted localhost development origins; no arbitrary origin is trusted.
Open guide →GuideUnderstand widget error codes
Handle invalid account, origin denied, rate limited, busy, session denied, unavailable and voice-engine unavailable outcomes.
Open guide →GuideProtect website visitor data
Minimise visitor name/IP retention and follow privacy notice/consent requirements for voice and presence evidence.
Open guide →