Bringme Bell & Teams configuration

🗨️ Purpose

This guide is intended for the technical administrator(s) of your organization, typically your internal IT department or external service provider.

The Teams integration will enable the Bringme Bell to call Teams users directly from the (front) door. You'll have the capability to unlock the door through Teams using your Teams Client, simply by inputting a DTMF code during the call.

To facilitate this, your organization must utilize an external provider called "CyberTwice," particularly their product CyberGate. CyberGate is a subscription-based Software-as-a-Service (SaaS) hosted on Azure. It allows organizations that have integrated Microsoft Teams to link IP devices with two-way audio and live video directly to Microsoft Teams.

This document consist of 3 high level steps, next to the requirements:

1. Purchase CyberGate via Microsoft Azure Marketplace or Microsoft AppSource
2. Activate CyberGate and add devices
3. Communicate credentials to Bringme in a secure way

Legal disclaimer: Bringme is not associated with Cybertwice. Questions regarding data handling and privacy should be directed to them or can be consulted here

✅ Requirements

• At least one Bringme Bell.
• Static WAN IP address (The location where the Bringme Bell is installed needs a fixed WAN IP for security reasons).
• Firewall rules should be configured for the location to allow outgoing SIP (5061) and SRTP traffic.
• A Microsoft 365 tenant with a subscription that includes Teams.
• An administrative account designated with the Global Administrator role within Office 365.
• Access to Microsoft AppSource or Microsoft Azure Marketplace with this administrative account.

If you are located in a multi-tenant building please contact your Customer Success Manager from Bringme to discuss the options.

If your organization meets all the requirements, you can proceed with the technical setup.

🛠️ Technical setup

Both Microsoft stores (Azure Marketplace and AppSource) can be used to purchase CyberGate. The difference between both stores is the way of payment.

• The Microsoft Azure Marketplace can be used it you already have a Microsoft Azure
  (Pay-as-you-go) subscription active or if you you are able to create a new one.
  • Follow step A - Azure Marketplace guide
• The Microsoft AppSource can be used if you do not want use the other method to purchase CyberGate, you only need a credit card.
  • Follow Step B - Microsoft AppSource guide

Step A - Azure Marketplace

The specific software we need to add from the Azure Marketplace is called Cybergate SIP intercom connect for Teams.

Open your preferred browser and login to Azure with an account that has the Global Administrator role. Go to Azure Marketplace.

Search for “Cybergate” and select the application marked in yellow.

Select Cybergate flex plan and press subscribe.

Add Cybergate to your chosen subscription and resource group. Give it a name and select your preferred billing type, either monthly or yearly.

The number of users corresponds to the number of Bringme Bell devices for which you want to activate the Teams call option and is independent of the number of Teams users in your organization. Please refer to the Cybertwice pricing page for more information.

Finally, select recurring billing and click on 'review and subscribe', finished by subscribe.

After clicking Review + subscribe, the Azure Marketplace will redirect you to the CyberGate Management Portal where you can activate your CyberGate Purchase.

View the subscription details and click ‘Activate’. This will take you to the dashboard of the admin portal.

Once you finished subscribing, you can find the CyberGate integration in Microsoft Azure Portal > SaaS

All configurations are currently completed in Azure. Now, it's time to access the publisher's management portal. Follow step C - CyberGate Management Portal.

Step B - Microsoft AppSource

Click on the following link to go to the AppSource: https://appsource.microsoft.com

Search for ‘cybergate’. You’ll find CyberGate SaaS solution - by CyberTwice.

Click on ‘Free trial’ to start the purchasing procedure

Click ‘Get it now’ to start the purchasing procedure

Select the CyberGate flex plan and click ‘Next’

Select the billing term and payment method.

The number of users corresponds to the number of Bringme Bell devices for which you want to activate the Teams call option and is independent of the number of Teams users in your organization. Please refer to the Cybertwice pricing page for more information.

Review the details (address & payment method). You can also add a new payment method if no payment method is available

When done, click ‘Accept agreement & place order’

The AppSource will redirect you to the CyberGate Management Portal where you can activate your CyberGate Purchase.

Click ‘Activate’ to activate your CyberGate subscription. It will take you to the dashboard of the admin portal.

During the purchase & activation process, you will be redirected to the CyberGate
Management Portal where you must activate your CyberGate subscription. When you login in to the CyberGate Management Portal, please use the same admin user as used to purchase CyberGate.

The CyberGate Management Portal will open and show the License overview. Continue with Step C - CyberGate Management Portal.

Step C - CyberGate Management Portal

Open https://admin.cybergate.cybertwice.com/. The portal is divided into multiple sections, you can navigate between them using the sidebar.

Login with the same admin user that was used to purchase CyberGate.

Global settings

In the section ‘Global’ you have to configure three tenant related settings for CyberGate to function. The three mandatory settings are:

1. Grant CyberGate limited access to your Azure environment. This is mandatory to be able to call Teams users in your organisation.
2. Add at least one fixed public (WAN) IP-address your intercom uses to access the internet. This IP- address is needed to allow the intercom a connection to CyberGate.
3. Enable the “Secure-only” policy

Use the ‘Provide admin consent’ button to grant the set of access rights

Add your fixed WAN IP address of the location where the Bringme Bell is installed.

In the same global configuration, scroll down to the security policies and enable the "Secure-only policy". Ensure that it displays "Secure-only policy is enabled". This ensures that SIP communication is always encrypted.

Device settings:

In the section ‘Device’ you will need to add a ‘device’ for each intercom/pager/camera you are using on this subscription. It will automatically generate a SIP username and SIP password that can be used in your Bringme Bell.

Add a device in the device settings

Assign a clear name “Display Name” (this can be anything, incoming calls in Teams will be displayed as this name) to the device and select "Intercom" as the type.

Add a location, enable the "Allow calls from Teams to device" option, and set the door opening code to "00".

This code will need to be used in Teams to open the door via the Teams client when a incoming call arrives from the Bringme Bell.

Finally, copy and paste both the "Authentication username" and "Password" to your password manager for future reference.

The configuration is now done for your tenant, communicate the information to Bringme for finalization.

What information should I communicate to Bringme?

We have provided a temporary link with a password, where you can write down the received credentials and call flow. The credentials will be removed once Bringme finishes the configuration on our side.

This step is crucial because Bringme requires these values to complete the configuration on the Bringme Bell, without it we can’t continue.

• The authentication username from step C.
• The authentication password from step C.
• The call flow for the Bringme Bell, for example:
  
  • Reception button, which users should receive this call inside your Teams tenant?
    • We need their email addresses in your office tenant of those users
    • Should this be parallel or serial?
  • Call list (if applicable), which users should be listed in your call list?
    • We need their email addresses in your office tenant of those users

If you are not sure about the call flow, please contact your Customer Success Manager from Bringme to discuss the options.

How to safely share your information

We have provided a temporary link with a password, where you can write down the received credentials and call flow. The credentials will be removed once Bringme finishes the configuration on our side.

This step is crucial because Bringme requires these values to complete the configuration on the Bringme Bell.