Verify someone else's custom app

[Par Linderoth]

Hi,

I have a user who would like to use a Teams custom app from a customer of ours. How can we verify the app and what it does before allowing it in our environment?

[#2]

Hi @Par Linderoth  I don't have a suggestion for verifying an app but I do have a document to share about managing them (maybe you've seen this already but just in case....).

https://docs.microsoft.com/en-us/microsoftteams/teams-custom-app-policies-and-settings

[#3 · Accepted solution]

You cant really, unless you have access to the code. The app description and the consent screen should give you an idea of the type of actions the application might perform, but that's usually a bit vague. You can certainly add it in a test tenant and play with it, run some traces and capture audit events, etc.