Forum Discussion

yuu113's avatar
yuu113
Copper Contributor
Mar 21, 2022

In which scenario "webApplicationInfo" nad "validDomains" needs to be configured in manifest.json?

Hi, can someone help me to understand the behavior of "webApplicationInfo" and "validDomains" property in manifest.json?

 

<webApplicationInfo>

https://docs.microsoft.com/en-us/microsoftteams/platform/resources/schema/manifest-schema#webapplicationinfo

 

<validDomains>

https://docs.microsoft.com/en-us/microsoftteams/platform/resources/schema/manifest-schema#validdomains

 

I have created Teams Custom Bot Application (developed by Bot Framework v4) and in this app, Azure AD authentication and Graph API call (following below tutorial: https://docs.microsoft.com/en-us/graph/tutorials/bot-framework?tutorial-step=3), and API call to Azure QnA Maker endpoint is implemented.

 

So based on the doc's property definition, I thought I need to configure below infos in manifest.json, but actually application works (user can login, call graph api, can communicate with qna maker) in teams without those configuration.

・"webApplicationInfo"'s id : bot application id

・"validDomains" : token.botframework.com (redirect uri while AAD authentication), <QnAMakerName>.azurewebsites.net (for qna maker endpoint call)

 

Is it expected behavior? if expected, in which scenario those properties should be configured?

 

My Manifest.json

・validDomains is not configured

・webApplicationId is not configured (property not exist in manifest.json)

Bot Appications's Behavior

・user can login

 

・bot app can call Graph API

 

・Bot can communicate with QnA Maker (can get answer from QnA Maker).

 

Thank you very much in advance!

Bot Framework
QNA Bot
teams

7 Replies

  • Sayali-MSFT's avatar
    Sayali-MSFT
    Icon for Microsoft rankMicrosoft
    Mar 23, 2022

    yuu113 -1. If you want to add SSO in your application, you have to add web application information.
    2.If you want to render any website/page, then you need to add that domains name inside valid domains section. 

     

    Thanks, 

    Sayali

    ----------------------------------------------------------------------------------------

    If the response is helpful, please click "**Mark as Best Response**" and like it. You can share your feedback via Microsoft Teams Developer Feedback link. 

    • yuu113's avatar
      yuu113
      Copper Contributor
      Mar 25, 2022

      Thank you very much for the quick confirmation!

      Regarding 2nd question, let me confirm 1 point.
      I could understood "QnA Maker endpoint" need not to be configured in "validDomains" as there's no UI rendering.

      But regarding "token.botframework.com", as per the below official doc, it's mentioned that it needs to be set in "validDomains", but in my case, app works without this configuration and also from your explanation, seems not necessary.
      Is it really necessary in this scenario then?

      https://docs.microsoft.com/en-us/microsoftteams/platform/bots/how-to/authentication/add-authentication?tabs=dotnet%2Cdotnet-sample#install-and-test-the-bot-in-teams

      Thank you very much!

    • Sayali-MSFT's avatar
      Sayali-MSFT
      Icon for Microsoft rankMicrosoft
      Mar 24, 2022
      yuu113 - Could you please confirm if your issue has resolved with above suggestion or still looking for any help?

Resources