Authenication and 'website' Tab

%3CLINGO-SUB%20id%3D%22lingo-sub-112978%22%20slang%3D%22en-US%22%3EAuthenication%20and%20'website'%20Tab%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-112978%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20a%20question%20around%20the%20'website'%20tab%20in%20Teams%20and%20how%20it%20authenticates%20with%20Office%20365.%20For%20example%20you%20can%20add%20a%20SharePoint%20library%20and%20it%20signs%20in%20automatically.%20Yet%20now%20if%20you%20add%20a%20Sway%20or%20Yammer%20feed%20you%20hit%20an%20authentication%20page.%20What%20is%20happening%20and%20is%20there%20something%20we%20can%20do%20with%20the%20tab%20(say%20in%20how%20we%20form%20the%20link)%20to%20make%20sure%20it%20signs%20in.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHas%20something%20changed%20behind%20the%20scenes%20as%20I'm%20sure%20this%20worked%20a%20week%20or%20so%20ago.%3C%2FP%3E%3CP%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20906px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F21523iE5DEF0C86EF151A1%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22sway.png%22%20title%3D%22sway.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20887px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F21524i1A079C4AE2CE4A33%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22yammer.png%22%20title%3D%22yammer.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-112978%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EUser%20Interface%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-171299%22%20slang%3D%22en-US%22%3ERe%3A%20Authenication%20and%20'website'%20Tab%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-171299%22%20slang%3D%22en-US%22%3E%3CP%3EIt%20would%20be%20great%20is%20MS%20Teams%20sent%20a%20JWT%20token%20with%20the%20browser%20request%2C%20identifying%20the%20user%2C%20the%20same%20way%20they%20do%20for%20Actionable%20Cards%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foutlook%2Factionable-messages%2Fsecurity-requirements%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foutlook%2Factionable-messages%2Fsecurity-requirements%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-116406%22%20slang%3D%22en-US%22%3ERe%3A%20Authenication%20and%20'website'%20Tab%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-116406%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Steven!%26nbsp%3BI%20figured%20as%20much%20but%20worth%20throwing%20the%20question%20out.%20Thank%20you%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-113040%22%20slang%3D%22en-US%22%3ERe%3A%20Authenication%20and%20'website'%20Tab%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-113040%22%20slang%3D%22en-US%22%3EHey%20Simon%20%3A)%3C%2Fimg%3E%3CBR%20%2F%3E%3CBR%20%2F%3EThe%20website%20tab%20doesn't%20provide%20authentication%2C%20it%20just%20renders%20the%20page%20as%20it's%20delivered%2C%20SharePoint%20will%20also%20ask%20for%20authentication%20if%20you%20let%20the%20cookies%20expire.%3CBR%20%2F%3E%3CBR%20%2F%3EThis%20is%20why%20apps%20need%20to%20build%20their%20own%20tabs%2C%20they%20can%20then%20use%20the%20api%20provides%20for%20teams%20tabs%20to%20simplify%20the%20login%20process%2C%20see%20%3CA%20href%3D%22https%3A%2F%2Fmsdn.microsoft.com%2Fen-us%2Fmicrosoft-teams%2Fauth%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmsdn.microsoft.com%2Fen-us%2Fmicrosoft-teams%2Fauth%3C%2FA%3E.%20At%20Ignite%20we%20heard%20from%20SharePoint%20and%20Yammer%20that%20they%20were%20working%20on%20making%20these%20(and%20that%20Planner%20is%20going%20to%20sort%20out%20their%20annoying%20pop-up).%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1639829%22%20slang%3D%22en-US%22%3ERe%3A%20Authenication%20and%20'website'%20Tab%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1639829%22%20slang%3D%22en-US%22%3EHi%2C%20is%20it%20still%20same%20or%20anything%20changed%20by%20Microsoft%3F%20I%20have%20a%20website%20tab%20that%20renders%20asp.net%20mvc%20application%20and%20I%20need%20to%20enable%20SSO.%20Please%20suggest.%3C%2FLINGO-BODY%3E
MVP

I have a question around the 'website' tab in Teams and how it authenticates with Office 365. For example you can add a SharePoint library and it signs in automatically. Yet now if you add a Sway or Yammer feed you hit an authentication page. What is happening and is there something we can do with the tab (say in how we form the link) to make sure it signs in.

 

Has something changed behind the scenes as I'm sure this worked a week or so ago.

 sway.png

 yammer.png

4 Replies
Hey Simon :)

The website tab doesn't provide authentication, it just renders the page as it's delivered, SharePoint will also ask for authentication if you let the cookies expire.

This is why apps need to build their own tabs, they can then use the api provides for teams tabs to simplify the login process, see https://msdn.microsoft.com/en-us/microsoft-teams/auth. At Ignite we heard from SharePoint and Yammer that they were working on making these (and that Planner is going to sort out their annoying pop-up).

Hi Steven! I figured as much but worth throwing the question out. Thank you

It would be great is MS Teams sent a JWT token with the browser request, identifying the user, the same way they do for Actionable Cards:

 

https://docs.microsoft.com/en-us/outlook/actionable-messages/security-requirements

Hi, is it still same or anything changed by Microsoft? I have a website tab that renders asp.net mvc application and I need to enable SSO. Please suggest.