What the plugin is
- A custom Microsoft Teams meeting app distributed as a single
.zippackage (altoura-remote-expert-v1.12.0.zip). - Uploaded to the tenant via Teams Admin Center.
- Hosted by Altoura at
altouraremoteacs.azurewebsites.net. - Authorized against a single-tenant Entra ID app registration in the customer’s tenant.
- Uses a focused set of Microsoft Graph permissions (mostly delegated).
What the expert can do inside the meeting
Once the app is added to a live meeting, the Altoura Remote Expert side panel opens with three independent capabilities.Annotate
Capture the HMD user’s live view and draw arrows and freehand annotations anchored in their physical space.
Share URLs
Send web links to the HoloLens. Multiple URLs supported, each with its own entry.
Share Files
Drag-and-drop
.pdf documents and .glb 3D models directly from the side panel.None of these three require the others. An expert can share a file or URL without entering annotation mode, and can annotate without ever sharing a file.
The annotation toolbar
| Tool | What it does |
|---|---|
| Arrow | Places directional arrows on the captured view. Useful for “push this”, “rotate here”, “loosen this bolt”. |
| Pen | Freehand drawing for circles, outlines, and handwritten cues. |
| Color | Switch annotation color to match the surroundings or use color coding. |
| Undo | Reverses the most recent annotation action. |
| Delete | Clears all annotations on the current canvas. |
Supported file types
| Type | Extensions |
|---|---|
| 3D Models | .glb |
| PDF Documents | .pdf |
How the expert gets into a session
There are two entry points, mirroring the two HMD-side flows:Contacts flow — Adaptive Card invitation
Worker invites the expert from HoloLens
In the Contacts tab on the HMD, the worker picks the expert and taps Invite Expert.
Adaptive Card arrives in Teams chat
A card titled Frontline Remote Expert Request is posted in the expert’s Teams chat with a Join Meeting button.
Expert clicks Join Meeting
The Teams meeting opens. They review A/V, click Join now, and are connected to the field worker.
Meetings flow — pre-scheduled Teams meeting
Meeting is scheduled normally in Teams
A supervisor or author schedules a standard Microsoft Teams meeting and invites both the worker and the expert.
Worker joins from HoloLens
In the Meetings tab of Remote Expert on the HMD, the worker sees the meeting in their list and taps Join Meeting.
Before the first call — pre-call readiness
The one thing we strongly recommend experts do before their first live call is to verify the Altoura Remote Expert app is available in their Teams client. This avoids any mid-call surprises.Verify the Teams app is deployed
A 4-step walkthrough: open Teams → search for Altoura Remote Expert → open details → Add.
Troubleshooting the pre-call check
App not in search, Add button missing, or app not appearing in calls — common causes and fixes.
How the plugin is deployed (IT admin view)
For IT administrators, here’s the deployment at a glance. Full details live in the IT Admin Guide.Identify or create the Entra ID app registration
Use an existing single-tenant registration, or create a new one. Capture the client ID and tenant ID.
→ Step 1: Identify Your Existing App Registration
→ Step 1: Identify Your Existing App Registration
Create or verify a client secret
Used by the Altoura backend to authenticate with Microsoft Graph.
→ Step 2: Create or Verify a Client Secret
→ Step 2: Create or Verify a Client Secret
Grant Graph API permissions
Add
→ Step 3: Add Graph API Permissions
OnlineMeetings.ReadWrite, Chat.ReadWrite, Contacts.Read (delegated), and User.Read.All (application). Grant admin consent.→ Step 3: Add Graph API Permissions
Upload the Teams app package
In Teams Admin Center, upload
→ Step 4: Upload the Teams App Package
altoura-remote-expert-v1.12.0.zip and confirm status Allowed. Optionally pin the app via setup policies.→ Step 4: Upload the Teams App Package
Open network access and provide credentials
Allowlist
→ Steps 5–6: Network Configuration & Credentials
altouraremoteacs.azurewebsites.net on HTTPS/443 and securely hand the three identity values to Altoura.→ Steps 5–6: Network Configuration & Credentials
Validate end-to-end
Run the validation checklist to confirm meeting creation, Adaptive Card delivery, panel loading, annotation, and real-time sync all work.
→ Step 7: Validate the Installation
→ Step 7: Validate the Installation
Security posture
The plugin is designed for enterprise deployment with a minimal, auditable permission footprint.| Capability | Can do | Cannot do |
|---|---|---|
| Create and manage Teams meetings | Yes — as the signed-in user. | — |
| Send chat messages (Adaptive Cards) | Yes — to notify experts. | — |
| Read the user’s personal contacts | Yes — to power the expert search. | — |
| Resolve user profiles by Object ID | Yes — for display name/email. | — |
| Read email or mailbox contents | — | No. |
| Access OneDrive / SharePoint files | — | No. |
| Read calendar events | — | No. |
| Modify users, roles, or directory | — | No. |
- Delegated first. Meeting creation and chat are delegated, so every action is scoped to the currently signed-in user.
- Single application permission. Only
User.Read.All, and only for backend user lookups. - No secrets in transit. Altoura never stores user credentials; the client secret is the only shared secret, scoped to your own tenant’s app registration.
- Rotatable. Customers rotate the client secret on their own schedule (recommended every 12 months) without needing new Altoura configuration beyond updating the value.
Quick-reference: the plugin on one page
| Item | Value |
|---|---|
| Package name | altoura-remote-expert-v1.12.0.zip |
| Host | altouraremoteacs.azurewebsites.net (HTTPS/443) |
| Identity model | Single-tenant Entra ID app registration in customer tenant |
| Client secret | Customer-managed, provided securely to Altoura |
| Delegated permissions | OnlineMeetings.ReadWrite, Chat.ReadWrite, Contacts.Read |
| Application permissions | User.Read.All |
| OAuth scope | offline_access |
| Install method | Teams Admin Center → Manage apps → Upload new app |
| Pinning | (Recommended) Setup Policies → Meeting Extensions |
| Deployment propagation | Up to 24–48 hours |
| Support | support@altoura.com |

