Website calling widget and main IVR
Deploy the approved-origin widget, create short-lived guest sessions, call the XC account IVR and control presence, audio and error handling.
Guides in this workflow
Follow the guide that matches the exact action, filter, menu change or issue.
Understand the xConnect website widget
Provide approved website visitors with a secure browser call to the account IVR.
Review the widget account
Use the generated XC account code and display name.
Configure approved website origins
Allow only exact normalised origins configured for the customer/account.
Copy the widget snippet
Copy the generated script once before the closing body tag.
Avoid duplicate widget installation
Insert the snippet once per page/template to prevent duplicate controls and sessions.
Create a website visitor session
Allow the widget to submit account, origin, IP and optional visitor name for validation.
Understand guest extensions
Use a short-lived generated guest SIP identity for the visitor session.
Understand widget access-token storage
Recognise that the access token is returned transiently and stored one-way as a hash.
Understand transient SIP credentials
Recognise that the generated SIP password is returned only for the active session and stored encrypted.
Understand widget session lifetime
Use the configured bounded expiry and heartbeat; expired sessions are disabled.
Understand passive presence
Allow registration/heartbeat without requesting microphone access.
Grant microphone access for calls
Request browser microphone permission when the visitor starts or answers a call.
Call the account IVR
Use the widget call action to create an authorised call from the guest to the account route.
Use the main IVR
Listen to the prompt and enter the desired extension, with 0/no-input fallback where configured.
Answer a website call
Use Answer when an authorised incoming website call is presented.
Decline a website call
Use Decline and record the outcome.
Mute a website call
Toggle the microphone during the active call.
End a website call
Select End and allow the widget to hide/reset after completion.
Send website DTMF
Use keypad digits to navigate the IVR or in-call options.
Update website visitor presence
Use online heartbeats and page-exit offline updates.
Understand per-IP rate limiting
Recognise the configured per-minute request/session limit.
Understand concurrent visitor limits
Recognise the configured maximum active website sessions/calls.
Understand widget CORS behaviour
Use PUT/OPTIONS from HTTPS origins or permitted localhost development origins; no arbitrary origin is trusted.
Understand widget error codes
Handle invalid account, origin denied, rate limited, busy, session denied, unavailable and voice-engine unavailable outcomes.
Protect website visitor data
Minimise visitor name/IP retention and follow privacy notice/consent requirements for voice and presence evidence.