Configuring Champions

Access: Champion Web Experience > Champions

Overview

A Champion is a way to include agentic workflows into your chat interactions. Champions represent agentic use-cases or workflows. If no Champions are configured within an account, basic product knowledge-base retrieval will be used during chat interactions with no advanced agentic functionality

What is Champion Configuration?

Configuration = Setting up the tools and connections a Champion needs to function

Each Champion requires:

• Service Connections: URLs and endpoints to ERP/systems
• Authentication: Credentials for accessing those systems
• Tool Configuration: Specific tools the Champion uses
• Display Settings: Names and descriptions for management

Why Configuration is Required

Champions need configuration to:

• ✅ Connect to your ERP or other business systems
• ✅ Authenticate with proper credentials
• ✅ Access data securely on behalf of users
• ✅ Perform read/write operations as needed
• ✅ Maintain security and audit trails

Without configuration, Champions cannot function.

---

Configuration Process

Step 1: Navigate to Champions

1. Log in to Champion Web Experience

2. Click "Atlas > Choose Champions" in left navigation
3. You'll see the Champions gallery

Step 2: Find Your Champion

Champion Gallery displays all available Champions:

Champion Card Shows:

• Champion name and icon
• Brief capability description
• Status badge:
  • Available: Not yet configured
  • Partially Configured: Some tools configured
  • Configured: All required tools set up
  • Active: Currently in use

Step 3: Start Configuration

1. Find the Champion you want to configure
2. Click "Setup" button on the champion card

3. Configuration panel opens showing required tools

4. Click "Configure" on each tool that needs setup

Step 4: Configure Required Tools

Each Champion lists its required tools:

Tool Configuration Panel Shows:

Champion: Purchase Order Management Champion

Required Tools:
├─ ERP API Connection          [Configure] ← Not configured
├─ Purchase Order Read Access  [Configure] ← Not configured
└─ Purchase Order Write Access [Configure] ← Not configured

Optional Tools:
└─ Advanced Analytics          [Configure] ← Optional

For Each Tool:

1. Click "Configure" on the tool

2. Fill out Configuration Form:

Display Name (Required):

• Friendly name for this configuration
• Example: "Default Connection for Org"
• Helps identify config in lists

After entering display name:

Description (Required):

• What this config does and how it's used
• Example: "A default connection for the account"
• Provides context for team

Service Configuration (Varies by tool):

• Connection URLs
• API endpoints
• Database connection strings
• Service account details

Authentication Method (Required):

• OAuth2 / OIDC
• API Key
• Basic Authentication
• Service Account Token
• AWS IAM Roles

3. Fill Authentication Details:

Depending on auth method:

OAuth2 / OIDC:

• Client ID
• Client Secret
• Authorization endpoint
• Token endpoint
• Scopes

API Key:

• API key value
• Header name
• Key prefix (if applicable)

4. Click "Save"

5. Verify: Tool shows "Configured" status

Step 5: Repeat for All Required Tools

Continue configuring each required tool until all show "Configured" status.

Step 6: Test Configuration (Optional but Recommended)

Some Champions offer testing:

1. Click "Test Configuration" button
2. Champion performs test query or operation
3. Results shown:
   • ✅ Success: Configuration working
   • ❌ Error: Issue with credentials or connection

Fix any errors before enabling.

Step 7: Enable the Champion

1. Verify all required tools are configured
2. After configuration, you can view the Champion in the chatbot by clicking "Choose Champion"

3. Click "Close" to return to Champion management

4. Champion becomes available to users in your organization

Managing Configured Champions

To manage already-configured Champions:

1. Click "Chosen Champions" tab

2. Find the Champion and click "Manage"

3. You can reconfigure any tool

---

Example: Configuring ERP Champions

Purchase Order Management Champion

Required Tools:

Tool 1: ERP Database Connection

Display Name: Main ERP Connection
Description: Production ERP database for PO operations

Service Configuration:
├─ Host: erp.yourcompany.com
├─ Port: 5432
├─ Database: qad_production
├─ Schema: public
└─ SSL: Enabled

Authentication:
├─ Method: Service Account
├─ Username: champion_service
└─ Password: [secure credential]

Tool 2: Purchase Order Read Access

Display Name: PO Query API
Description: Read-only access to purchase order data

Service Configuration:
└─ API Endpoint: https://erp.yourcompany.com/api/v1/po

Authentication:
├─ Method: API Key
├─ Header: X-API-Key
└─ Key: [secure API key]

Tool 3: Purchase Order Write Access

Display Name: PO Update API
Description: Write access for updating PO lines

Service Configuration:
└─ API Endpoint: https://erp.yourcompany.com/api/v1/po/update

Authentication:
├─ Method: OAuth2
├─ Client ID: champion-po-writer
├─ Client Secret: [secure secret]
└─ Scope: po:write

Budget & Forecast Champion

Required Tools:

Tool 1: GL Account API

Display Name: Financial Data API
Description: Access to GL accounts and budget data

Service Configuration:
└─ API Endpoint: https://erp.yourcompany.com/api/v1/financials

Authentication:
├─ Method: OAuth2 Client Credentials
├─ Client ID: champion-gl-access
├─ Client Secret: [secure secret]
├─ Token Endpoint: https://auth.yourcompany.com/oauth/token
└─ Scopes: gl:read gl:write budget:read budget:write

Game Ready Champion (Redzone)

Required Tools:

Tool 1: Redzone API Connection

Display Name: Redzone Production API
Description: Connection to Redzone for shift data

Service Configuration:
└─ API Base URL: https://api.redzone.com/v2

Authentication:
├─ Method: API Key
├─ Header: Authorization
├─ Key Format: Bearer [token]
└─ API Key: [Redzone API key]

Tool 2: Redzone Playbook Access

Display Name: Knowledge Base Access
Description: Access to Redzone playbook and SOPs

Service Configuration:
└─ Playbook API: https://api.redzone.com/v2/playbooks

Authentication:
├─ Method: Inherit from Tool 1
└─ [Same credentials as Redzone API Connection]

Tool 3: Action Creation Permission

Display Name: Action Write Access
Description: Permission to create actions on behalf of users

Service Configuration:
└─ Actions API: https://api.redzone.com/v2/actions

Authentication:
├─ Method: OAuth2 User Delegation
├─ Authorization Endpoint: https://auth.redzone.com/authorize
├─ Token Endpoint: https://auth.redzone.com/token
├─ Client ID: champion-redzone-actions
└─ Client Secret: [secure secret]

---

Authentication Methods

OAuth2 Client Credentials

Use When: Service-to-service authentication (machine-to-machine)

Required Fields:

• Token endpoint URL
• Client ID
• Client secret
• Scopes (permissions requested)
• Audience (optional)

Example:

Token Endpoint: https://auth.example.com/oauth/token
Client ID: champion-service
Client Secret: s3cr3t_v4lu3
Scopes: erp:read erp:write

How It Works:

1. Champion sends client ID + secret to token endpoint
2. Receives access token
3. Uses access token for API requests
4. Refreshes token when expired

OAuth2 Authorization Code (User Delegation)

Use When: Champion acts on behalf of specific users

Required Fields:

• Authorization endpoint
• Token endpoint
• Client ID
• Client secret
• Scopes
• Redirect URI (provided by Champion)

Example:

Authorization: https://auth.example.com/authorize
Token: https://auth.example.com/token
Client ID: champion-user-delegate
Client Secret: s3cr3t_v4lu3
Scopes: openid profile email offline_access
Redirect: https://api.champion.ai/champion/api/oauth/callback

How It Works:

1. User clicks to authorize Champion
2. Redirected to your consent page
3. User logs in and approves
4. Redirected back to Champion with authorization code
5. Champion exchanges code for access token
6. Champion uses user's access token for requests

See Champion Integration Guide for complete OAuth2 setup.

API Key

Use When: Simple API key authentication

Required Fields:

• API key value
• Header name (e.g., "X-API-Key", "Authorization")
• Key prefix (e.g., "Bearer ", "ApiKey ")

Example:

Header: X-API-Key
Prefix: (none)
Key: abc123def456ghi789jkl012

How It Works:

1. Champion includes API key in every request
2. Header: X-API-Key: abc123def456ghi789jkl012

Basic Authentication

Use When: Username/password authentication

Required Fields:

• Username
• Password

How It Works:

1. Champion encodes username:password in Base64
2. Sends as Authorization header
3. Header: Authorization: Basic dXNlcm5hbWU6cGFzc3dvcmQ=

AWS IAM Roles

Use When: Accessing AWS services with assumed roles

Required Fields:

• Role ARN
• External ID (for security)
• Region

Example:

Role ARN: arn:aws:iam::123456789012:role/ChampionAgentRole
External ID: unique-external-id-123
Region: us-east-1

---

Managing Configurations

Viewing Active Champions

Access: Champions > Chosen Champions tab

Shows all Champions currently active in your organization.

Champion Details:

• Champion name
• Status (Active, Inactive)
• Last used date
• Configuration status
• "Manage" button

Modifying Configurations

1. Navigate to Chosen Champions
2. Find the Champion to modify
3. Click "Manage"
4. Click "Configure" on tool to modify
5. Update connection details or credentials
6. Click "Save"
7. Configuration updated immediately

Disabling Champions

Temporary Deactivation:

1. Go to Champion in Chosen Champions
2. Click "Disable" or toggle switch
3. Champion becomes unavailable to users
4. Configuration preserved
5. Can re-enable anytime

Complete Removal:

1. Go to Champion in Chosen Champions
2. Click "Remove" or "Delete"
3. Confirm removal
4. Champion removed from organization
5. Configuration deleted
6. Must reconfigure to re-enable

---

Security Best Practices

Credential Management

✅ Do:

• Use service accounts with minimal necessary permissions
• Rotate credentials regularly (quarterly)
• Store credentials securely
• Use different credentials per environment
• Monitor credential usage

❌ Don't:

• Use personal user accounts
• Share credentials across multiple Champions
• Hardcode credentials in multiple places
• Use production credentials in testing
• Leave default passwords

Permission Scoping

✅ Do:

• Grant only required permissions (least privilege)
• Read-only for Champions that don't update data
• Separate read and write permissions
• Monitor Champion activity

❌ Don't:

• Grant admin permissions to Champions
• Give write access when read-only sufficient
• Use wildcard permissions
• Bypass approval workflows

Testing Configurations

✅ Do:

• Test in non-production environment first
• Verify read operations work
• Test write operations carefully
• Check error handling
• Monitor logs during testing

❌ Don't:

• Test directly in production
• Skip testing write operations
• Ignore failed test results
• Configure without testing

---

Troubleshooting

Tool Won't Save

Problem: Configuration won't save or shows error

Solutions:

1. Check all required fields are filled
2. Verify URLs are valid (include https://)
3. Ensure credentials are correct format
4. Check for special characters in fields
5. Try refreshing page and re-entering

Test Configuration Fails

Problem: Test returns error or connection failure

Solutions:

1. Verify service endpoint is accessible
2. Check credentials are correct
3. Ensure firewall allows Champion's IP ranges
4. Verify permissions are granted
5. Check service is running and healthy
6. Review error message for specific issue

Champion Shows "Partially Configured"

Problem: Champion not fully set up

Solutions:

1. Review required tools list
2. Find tools marked as "Not Configured"
3. Configure each remaining tool
4. Verify all show "Configured" status

Champion Not Appearing for Users

Problem: Users can't access configured Champion

Solutions:

1. Verify Champion is enabled (not just configured)
2. Check users have permission to use Champion
3. Ensure organization is active
4. Verify Champion activation completed
5. Users may need to refresh/logout and back in

---

Quick Start: Common Configurations

Configuring Your First ERP Champion

Recommended First Champion: Item Master Updates Champion

Why:

• Read-mostly operations (safer)
• Clear value demonstration
• Simple tool requirements
• Quick to configure and test

Steps:

1. Go to Champions > Find "Item Master Updates"
2. Click "Setup"
3. Configure ERP Database Connection
4. Configure Authentication
5. Test with simple query
6. Enable for organization

Minimal Configuration

For quick start:

Just the Essentials:

1. Database/API connection
2. Read-only credentials
3. Basic auth (upgrade to OAuth2 later)

Then Add:

• Write permissions (for update Champions)
• Advanced features
• Performance optimization

---

🔧

Ready to Configure Champions?

Start by navigating to Agents and selecting your first Champion to configure. Follow the guided setup for each required tool.

Related Topics