Microsoft Tech Community Live:  Microsoft Teams Edition
November 09, 2021, 08:00 AM - 12:00 PM (PST)

Incoming Webhook security

%3CLINGO-SUB%20id%3D%22lingo-sub-2080080%22%20slang%3D%22en-US%22%3EIncoming%20Webhook%20security%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2080080%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eanyone%20got%20a%20solution%20to%20add%20security%20to%20the%20Incoming%20Webhook%20feature%20%3F%20I%20realize%20the%20risk%20is%20not%20high%20but%20still%2C%20I%20would%20like%20to%20make%20more%20secure%20than%20what%20is%20provided%20currently.%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20the%20message%20to%20warn%20us%20this%20was%20coming%2C%20MSFT%20mentions%20%22%3CSPAN%3EWe're%20transitioning%20to%20a%20new%20webhook%20URL%20format%20where%26nbsp%3B%3C%2FSPAN%3Eis%20friendly%20short%20name%20for%20the%20tenant.%20Your%20organization%20can%20use%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Eto%20filter%20egress%20traffic%E2%80%9D.%26nbsp%3B%3C%2FP%3E%3CP%3EHow%20can%20this%20filtering%20be%20achieved%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20in%20advance%20for%20your%20suggestions%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2080080%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Esecurity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2090632%22%20slang%3D%22en-US%22%3ERE%3A%20Incoming%20Webhook%20security%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2090632%22%20slang%3D%22en-US%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F5458%22%20target%3D%22_blank%22%3E%40Vesa%20Nopanen%3C%2FA%3E%3C%2FLINGO-BODY%3E
Senior Member

Hi,

 

anyone got a solution to add security to the Incoming Webhook feature ? I realize the risk is not high but still, I would like to make more secure than what is provided currently. 

In the message to warn us this was coming, MSFT mentions "We're transitioning to a new webhook URL format where is friendly short name for the tenant. Your organization can use to filter egress traffic”. 

How can this filtering be achieved ?

 

Thanks in advance for your suggestions

2 Replies

any update on this ? how can we filter out the traffic which the webhook is receving