Microsoft Teams Integration with SMARTFENSE

This article describes the necessary steps to configure the connection between Microsoft Teams and SMARTFENSE, enabling authentication and communication through Microsoft Graph API.

Important considerations for configuring the integration with Microsoft Teams:

1. Follow the configuration guide to complete the required fields on the platform. The user performing the configuration in Microsoft Entra ID must have administrative permissions.

2. Authorize the integration between SMARTFENSE and Microsoft Teams. The user who authorizes the integration must be a Microsoft Entra ID administrator and also have an Administrator role in the SMARTFENSE platform.

3. Verify the connection to ensure that the process was completed successfully.

4. The account (Microsoft Entra ID user) that performs the authorization will be the account from which notifications are sent. This user cannot receive Teams notifications from the SMARTFENSE platform (self-notifications are not possible). Therefore, this user cannot be included in SMARTFENSE campaigns when this notification method is used. It will not be delivered to the same user even when using the “Send me Test” button. To perform a test, the campaign must be sent to a different user.

Configuration in Microsoft Azure

1. Log in to the Azure portal: https://portal.azure.com/.

2. In the left sidebar menu, select Microsoft EntraID.

3. Click on App Registrations.

4. Select New registration from the top menu.

5. In the Name field, enter SMARTFENSE.

6. Under Supported account types, select Accounts in this organizational directory only (Defense Balance SL only - Single tenant).

7. In the Redirect URI field, enter:
   https://www.smartfense.com

8. Press the Register button.

Application Identifiers

Once the application is created:

1. Copy the values from the Application (client) ID and Directory (tenant) ID fields.

2. Paste these values into the SMARTFENSE platform, in the Application ID and Directory ID fields, respectively.

Response URL Configuration

1. In the newly created application, select the Redirect response URLs option within the Overview > Settings menu.

2. Add the following response URL:
   https://instancename.takesecurity.com/config/microsft-teams-auth/callback/

3. Click Save.

API Permissions Assignment

1. Select API Permissions in the left Manage menu.

2. Press the Add button to open the Add API access menu.

3. Select the Microsoft Graph API.

4. Assign the following delegated permissions:

   • Create chats: Chat.Create

   • Send user chat messages: ChatMessage.Send

   • Read all users full profiles: User.Read.All

5. Click Update permissions in the Add API access section.

6. Then, press Grant permissions in the Required permissions section.

Creating the Secret Key

1. In the Settings menu, select Certificates & secrets.

2. Press New client secret.

3. In the Key description field, enter SMARTFENSE.

4. Select an expiration option according to your security policies.

5. Click Save to generate the Value field.

6. Copy the generated value immediately, as it is only shown once and cannot be retrieved later. 

Connection with SMARTFENSE

1. Paste the secret key value copied in the previous step into the SMARTFENSE platform, in the Application secret key field.

2. Click Check connectivity to validate that the configuration has been done correctly.

💡 Mejores prácticas

• Verify Microsoft Graph permissions before testing the connection to avoid authentication errors.

• Store the Bot User OAuth Token and the Application secret key in a secure place.

• Set internal alerts before the key expiration date to renew it in time.

• Disable any script-blocking extensions before running the Check connectivity test.