Skip to main content
Altoura Frontline is a HoloLens 2 / iPad application that lets a field worker join video calls with Microsoft Teams. The remote expert sees the field worker’s video directly in Microsoft Teams; the Altoura meeting extension app is used only for annotations, which are rendered in augmented reality on the field worker’s device. This guide describes the one-time Azure configuration your IT team performs to enable Remote Expert, and explains how data flows and is protected.

​
Purpose & Scope

Remote Expert uses a hybrid deployment model:
  • Altoura hosts the Teams web app (meeting extension), the backend / secure API, and the supporting data stores (Azure Blob, Table, and Web PubSub) on Altoura’s Azure App Service — the Remote Expert app at remote-expert-web.altoura.com.
  • Your organization hosts the Azure Communication Services (ACS) resource in your own Azure tenant and shares its credentials with Altoura.
Your IT team performs two one-time setup tasks in your tenant:

Deploy the ACS resource

Create an Azure Communication Services resource and share its keys.

Register the Entra ID app

Register a multitenant app for Teams SSO and Microsoft Graph access.

​
Who Hosts & Manages What

​
Data Flow

  1. A field worker and a remote expert join a Microsoft Teams meeting and open the Altoura Remote Expert extension (the Altoura-hosted Teams web app).
  2. The Teams client requests a single sign-on (SSO) token from Microsoft Entra ID using the multitenant app registration.
  3. The web app calls the Altoura backend / secure API with the SSO token. The backend validates the token and identifies the tenant.
  4. Acting on behalf of the signed-in user (delegated / on-behalf-of flow), the backend calls Microsoft Graph as needed (contact list for expert search, meeting creation and invites, chat, profile). Using your ACS connection string, it also mints a short-lived ACS access token and returns it to the web app.
  5. Session content is stored in Altoura’s Azure data stores: shared files in Blob Storage, annotations in Table Storage, with real-time annotation sync via Azure Web PubSub.
  6. The web app uses the ACS access token to establish the real-time session against your ACS resource; audio, video, and AR annotations flow between participants.
All Microsoft Graph access is delegated — the app acts only as the currently signed-in user, and only for what that user is already permitted to see. Your ACS resource and its media remain in your Azure tenant.

​
What Data Is Stored, and Where

For a full explanation of why ACS and the Entra ID app are provisioned in your tenant, plus answers to common security-review questions, see Data Security & FAQ.

​
Next Steps

1

Deploy the ACS resource

Create an Azure Communication Services resource in your tenant.
2

Register the Entra ID app

Register the multitenant app for Teams SSO and Microsoft Graph.
3

Share the details with Altoura

Collect and securely share the values Altoura needs to generate your Teams app package.