How do I get my teams bot to authenticate to a web service
I have a teams bot which I want to use as an interface for my service stack webservice however the token I have access to is not being accepted by the web service. I followed the "AAD SSO for tabs and message extension" tutorial to set up my Azure instance and get a basic bot up and running. When I modified the query handler to send a request to a web service with the token provided it is responding with a login page. This is the code that I added to the Simple Graph Client in a new method which passes in what the user types as query HttpWebRequest request = (HttpWebRequest)WebRequest.Create("https://<my website>/api/ws/v1/search?query=" + query); request.Headers.Add("Authorization", "Bearer " + _token); request.Method = "GET"; request.AutomaticDecompression = DecompressionMethods.GZip | DecompressionMethods.Deflate; using (System.Net.HttpWebResponse response = (HttpWebResponse)request.GetResponse()) using (Stream stream = response.GetResponseStream()) using (StreamReader reader = new StreamReader(stream)) { return reader.ReadToEnd(); } Do I need to make use of a shared certificate? or is there some additional configuration that I have missed which is necessary to make this situation work?
Teams created a Tenant that I can't delete
I am unable to delete a tenant that waa created by mistake while logging in to Teams. I do not have any active subscription but it still says so. My dashboard says I have Azure AD for Microsoft 365. How do I proceed to delete this as its affecting my main email ID to attend Teams meetings.
Tenant AD account changed from member to guest user type is seen as a member in Teams
Hi, I'm testing a scenario where I want to create accounts for external partners in my Azure AD tenant in a way to manage these accounts and know exactly what will be their login experience. I don't want to use Azure AD paid features so I guess I'm ok regarding licencing. My requirements are: a) I do not want them to be part of the "Everyone Except External Users" security group so they will not have access to SharePoint/O365 groups public sites by default b) I want them to be seen as guest in Teams if they are invited to a Teams (In a way to enable/disable guest options) c) I don't want them to be part of org-wide Teams So I've created the accounts in Azure AD, changed the account user type from member to guest with PowerShell Everything is working as expected and all my requirements are met. The only thing that is misleading is the guest user role in Teams that is showing "Member" instead of "Guest" (even if they are and behave like guests) Is this normal? Thanks.
Organisation Chart Setup with Azure AD
I have been trying to set up the "Organisation" tab view for an org through the setting of the "manager" property for users. It has been fairly simple through exchange so far but I've hit a bit of a block and I'm not sure if what I'm attempting is possible. Some of the users have Azure AD profiles that are sync'ed from an on-prem AD, and so their manager attribute could only be set to another account in that same AD. This meant that managers who's accounts are cloud based could not be set for some of the on-prem sync'd users. I assumed this could be solved by changing the https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-custom#azure-ad-app-and-attribute-filtering in the Azure AD Connect configuration to remove that attribute from the sync to Azure AD, then I could change the setting through Azure AD to the Object ID of the intended manager even if they are cloud only accounts. This however still doesn't let me edit the "manager" attribute. Would appreciate if someone could show me my error or a limitation of the system that I am not aware of, thanks.