Hello! We have Knowledge Base with Access Control: SSO required. We’ve set it up correctly and SSO is working fine. We’ve configured Chatflow Bot with Knowledge Base Lookup. We use Verification API to identify users, but Chatflow widget is used on a page with different domain. KB has knowledge.domain and Chatflow is used on app.domain.
Chatflow Bot is not able to return any private articles. It works fine with Public articles or when Chatflow Bot is used directly on a Knowledge Base page with SSO. I found this thread with a literally identical issue: Slack
Can someone confirm that Chatflow Bot is not able to return articles hidden behind SSO on a page without SSO, even with the identified user? Thanks!
Hi @JarAdamczyk and welcome, we are so happy to have you here!
Thanks for asking the Community and thanks for sharing the link to the HubSpot Developers slack channel!
I’ll check internally on this for you and will get back as soon as possible.
Thanks for your patience!
Have a great day!
Best,
Bérangère
@BérangèreL
Hello again!
I just wanted to provider a little more context. Maybe it could be helpful for your dev team.
I loaded Chatflow with provided IdentificationToken (once again user is identified properly) on a KB page with SSO and it stopped working. It couldn’t return any private content results. Looks like using IdenficationToken is a problem here.
Hi @JarAdamczyk and thanks for the additional information!
Thanks for your patience!
After checking with the Team, it’s likely because the __hsmem cookie does not log a user in across domains.
I hope this helps!
Have a nice day!
Best,
Bérangère
Thank you for your reply! But is it by design? Does it mean that Chatflow identified with Visitor API won’t get an access to private articles?
Hi @JarAdamczyk, thanks for your message.
I’d like to share this article for information: “Chat with logged in visitors”.
Also, I would recommend connecting with HubSpot Technical Support, as Support is included in your subscription and they will be able to provide real-time assistance for this matter, including hopping on a screenshare if necessary.
The Support Team will be able to look into the chatflow if needed.
Thank you and have a great day!
Best,
Bérangère