Posts

Showing posts from June, 2023

Implement single sign-on (SSO) for Microsoft Teams

Image
  The Microsoft Teams Toolkit can register the Azure Active Directory (Azure AD) application in a single sign-in (SSO) project. Here, you'll learn how to manually register and configure the Azure AD app that can be used to implement SSO in a Microsoft Teams app to better understand all the required settings. Register an Azure AD application to support single sign-on (SSO) Open a browser and navigate to the  Azure Active Directory admin center (https://aad.portal.azure.com) . Sign in using a  Work or School Account  that has global administrator rights to the tenancy. Select  Manage > App registrations  in the left-hand navigation and then select  New registration . On the  Register an application  page, set the values as follows, and then select  Register : Name : My Teams SSO App Supported account types : Accounts in any organizational directory (Any Azure AD directory - Multitenant) Redirect URI : Web and  https://REPLACE.ngrok...

Understand authentication in Microsoft Teams

Image
Custom Microsoft Teams apps that incorporate user data protected by Azure AD will need to implement an authentication process. Single sign-on (SSO) provides a seamless way for your Microsoft Teams apps to authenticate users. In this unit, you'll learn about the different authentication options supported by Microsoft Teams and how the single sign-on (SSO) works with custom tabs and bots. Authentication and authorization in Microsoft Teams apps In Microsoft Teams, there are two different authentication flows for the app. Perform a traditional web-based authentication flow in a content page embedded in a tab, a configuration page, or a task module. If the app contains a conversational bot, use the OAuthPrompt flow, and optionally the Azure Bot Framework's token service to authenticate a user as part of a conversation. You can require that your users be logged in with a Microsoft account, or work and school account. This task is called user authentication because it enables the app...