Register the A2A Application

Create an Agent-to-Agent (A2A) server application that points Amazon Connect at your public Agentforce WebSocket URL and JWT secret. Save the application ID and ARN, and confirm the application type, URL, authentication type, and JWT secret ARN.

Because the registration fails when the WebSocket URL isn’t public or when authentication is omitted, consider these guidelines when you register the application.

AccessUrl is the public wss:// URL that Salesforce gives you for your org.
Use a public TLS WebSocket URL.
AuthConfig is required.
AccessUrl uses this format: wss://{MyDomain}.my.salesforce-scrt.com/agent-relay/v1/a2a/ws
where {MyDomain}.my.salesforce-scrt.com/agent-relay/v1/a2a/ws is the WebSocket URL and {MyDomain} is a value configured as part of Salesforce setup.

awscurl --service app-integrations --region <REGION> -X POST \
  --header 'Content-Type: application/json' \
  --data '{
    "Name": "agentforce-voice",
    "Namespace": "agentforce-voice",
    "Description": "Agentforce Voice real-time streaming",
    "ApplicationSourceConfig": {
      "ExternalUrlConfig": {
        "AccessUrl": "wss://<WEBSOCKET_URL>"
      }
    },
    "ApplicationType": "A2A_SERVER",
    "AuthConfig": {
      "AuthType": "API_KEY",
      "CredentialProviderIdentifier": "<JWT_SECRET_ARN>"
    }
  }' \
  https://app-integrations.<REGION>.amazonaws.com/applications

Save application Id and Arn from the response. Read the application back and confirm these values.
- ApplicationType is A2A_SERVER.
- AccessUrl is your WebSocket URL.
- AuthType is API_KEY.
- CredentialProviderIdentifier is the JWT secret ARN in the Connect region.