Quobis wac settings to deploy Quobis collaborator

Aliases and personal URL configuration

A user’s “personal URL” is automatically composed of the base system URL (eg, https://collaborator.company.com) followed by the user alias, given as a result a pattern like:

https://collaborator.company.com/alias

Users are allowed to change their alias through the application in the “Profile section”, as long as the new alias does not conflict with other alias in the system.

On the other hand, even when the users can create new alias, there is another “Personal URL” that always works, cannot be changed and which is composed of the base URL followed by the username.

https://collaborator.company.com/username

Note

Depending on the type of user accessing the endpoint the system resolves the URL differently:

  • If the user is logged in it will resolve it on the user’s domain

  • For an anonymous user the default domain is used

  • To call an specific user@domain, you’ll need to include both parameters. I.e.

https://collaborator.company.com/username@domain

When a user is created, if the system administrator does not provide an alias, then, the Quobis WAC will provide one according to the alias parameter as configured in the [user] section of wac.ini:

  • When alias is set to true, then Quobis WAC copies the username into the alias field.

  • When alias is set to false, then Quobis WAC copies the user’s UID into the alias field.

There is also another parameter in the same user configuration section that allows to create a blacklist of forbidden aliases. In summary, Quobis WAC will not allow to set aliases that:

  • Conflict with another UUID

  • Conflict with another username

  • Conflict with another alias

  • Belong to the alias blacklist

Example shown below of the wac.ini users section:

[users]
alias = true
forbiddenKeyWords = 'login,index'

Please note that the “personal URL” feature cannot be deactivated. A workaround to avoid unwanted calls that the end-user himself can do is to set the Personal URL to a long random string, so a potential attacker cannot guess it. Another way to deactivate this feature to every user is to block those specific URLs in the sippoas.reverse-proxy service.

On the other hand, please note that the “Personal URL” max string size on the application is set by the variable PROFILE_LINK_MAX_LENGTH at the conf.js file and defaults to 90 characters.

Phonebook system

The Quobis collaborator leverages the phonebook functionality of Quobis WAC in order to show contacts to specific user or group of users. If you want to use phonebooks in your deployment, please refer to the phonebook configuration

Simultaneous call support

In order to support or limit the multi-call support you can modify the QSS configuration to allow or reject calls when you are already on a call. This could be useful for some scenarios or for license limitation configuration for your customers. This limitation can be configured as explained here