Scaling Smart with Azure: Architecture That Works
Hi Tech Community! I’m Zainab, currently based in Abu Dhabi and serving as Vice President of Finance & HR at Hoddz Trends LLC a global tech solutions company headquartered in Arkansas, USA. While I lead on strategy, people, and financials, I also roll up my sleeves when it comes to tech innovation. In this discussion, I want to explore the real-world challenges of scaling systems with Microsoft Azure. From choosing the right architecture to optimizing performance and cost, I’ll be sharing insights drawn from experience and I’d love to hear yours too. Whether you're building from scratch, migrating legacy systems, or refining deployments, let’s talk about what actually works.
"Invalid JWT Error When Sending Messages from Azure Bot to Skype User
I'm encountering an "Invalid JWT" error when trying to send a non-reply message from an Azure Bot to a Skype user, despite using what appears to be a valid token. Here's a breakdown of my setup: I successfully generate an access token using OAuth client credentials for the Microsoft Bot Framework. I create a conversation ID successfully, but when I attempt to send a message using this ID, I receive a 401 error with "Invalid JWT." Here is the relevant part of my code: import requests # Setup for token generation service_url = "https://smba.trafficmanager.net/apis token_url = f'https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/token token_headers = {'Content-Type': 'application/x-www-form-urlencoded'} token_payload = { 'grant_type': 'client_credentials', 'client_id': app_id, 'client_secret': app_password, 'scope': 'https://api.botframework.com/.default } # Token request token_response = requests.post(token_url, headers=token_headers, data=token_payload) token = token_response.json()['access_token'] # Setup for creating a conversation conversation_headers = {'Authorization': f'Bearer {token}', 'Content-Type': 'application/json'} conversation_url = f"{service_url}/v3/conversations" conversation_payload = { "bot": {"id": f"28:{app_id}", "name": "botname"}, "isGroup": False, "members": [{"id": skype_id, "name": "Milkiyas Gebru"}], "topicName": "New Conversation" } conversation_response = requests.post(conversation_url, headers=conversation_headers, json=conversation_payload) conversation_id = conversation_response.json()["id"] # Setup for sending a message message_url = f"{service_url}/v3/conversations/{conversation_id}/activities" message_headers = {'Authorization': f'Bearer {token}', 'Content-Type': 'application/json'} message_payload = {"type": "message", "text": "My bots reply"} message_response = requests.post(message_url, headers=message_headers, json=message_payload) print("Create Message Response: ", message_response.json(), message_response.status_code) The response I get indicates an authorization error: Create Message Response: {'error': {'code': 'AuthorizationError', 'message': 'Invalid JWT.'}} 401 Has anyone experienced this issue before, or does anyone know what might be causing the JWT to be considered invalid? Any insights or suggestions would be greatly appreciated!Comparision on Azure Cloud Sync and Traditional Entra connect Sync.
Introduction In the evolving landscape of identity management, organizations face a critical decision when integrating their on-premises Active Directory (AD) with Microsoft Entra ID (formerly Azure AD). Two primary tools are available for this synchronization: Traditional Entra Connect Sync (formerly Azure AD Connect) Azure Cloud Sync While both serve the same fundamental purpose, bridging on-prem AD with cloud identity, they differ significantly in architecture, capabilities, and ideal use cases. Architecture & Setup Entra Connect Sync is a heavyweight solution. It installs a full synchronization engine on a Windows Server, often backed by SQL Server. This setup gives administrators deep control over sync rules, attribute flows, and filtering. Azure Cloud Sync, on the other hand, is lightweight. It uses a cloud-managed agent installed on-premises, removing the need for SQL Server or complex infrastructure. The agent communicates with Microsoft Entra ID, and most configurations are handled in the cloud portal. For organizations with complex hybrid setups (e.g., Exchange hybrid, device management), is Cloud Sync too limited?
Error creating Azure BOT: Failed to store new BOT
SCENARIO You are trying to create Azure BOT where you are already provided with an existing App registration. After adding relevant details, validation is passed however, the BOT fails to create with Internal Server error. CAUSE This error usually comes up if we are using the same APP ID which is already registered with another Azure BOT resource. { "status": "Failed", "error": { "code": "UnknownError", "message": "Failed to store new bot." } } RESOLUTION Azure BOT requires one to one mapping with the app registration. You can only have one BOT mapped to one App ID. Hence recommendation is to use single app registration for every BOT resource we create.
Help with Deploying AI Agents to Microsoft Teams Chats
Hello, I need help with deploying AI Agents (bots) to Microsoft Teams chats. Here's my current setup: - I have a REST API endpoint that processes user queries and provides LLM-based responses. - Users on my platform can create custom AI assistants. What I need assistance with is: - How to deploy these AI bots into Microsoft Teams chats, allowing end users to create and integrate their assistants directly into Teams. - Any resources or step-by-step guidance on bot registration, deployment, or integrating custom bots would be appreciated. Thank you for your help!
Send Messages using Bot/Change Notification in MS Teams
Hi I have some questions regarding bot functionality within Microsoft Teams. I'm developing an app/plug-in to monitor and analyze all incoming messages in chats and channels. The goal is to intercept these messages, check them for specific flagged (e.g., inappropriate) content, and instantly send a notification back to the respective chat or channel if flagged content is detected. I need to achieve this in real time. Currently, I’ve implemented the first half of this functionality using Microsoft Graph’s change notifications API, allowing me to intercept and read messages as they arrive. However, I’m facing a limitation: since my app doesn’t have permissions to post messages, I can't use the Graph API’s send capabilities to notify users within the channels or chats. To work around this, I’m considering utilizing a bot. My approach is to have a bot send these notifications to the appropriate chats and channels, using identifiers such as tenant ID, team ID, channel ID, message ID, and chat ID—information I retrieve through the change notifications API. So here are my main questions: Can I use a bot to send messages to various chats and channels on demand, leveraging the IDs obtained from the change notifications API? This would allow my app to handle message interception while the bot takes over in sending the flagged notifications. In my current setup, is there a way to reply to chats or channels directly using the Graph API's 'send' functionality through the app itself? It is related to Application/Delegation Permissions. Thanks
Former Employer Abuse
My former employer, Albert Williams, president of American Security Force Inc., keeps adding my outlook accounts, computers and mobile devices to the company's azure cloud even though I left the company more than a year ago. What can I do to remove myself from his grip? Does Microsoft have a solution against abusive employers?
Pyrit: I am not able to run Pyrit code(Automation framework by Microsoft)
I was not able to run Pyrit code that is mentioned in Microsoft documentation. Error: PYRIT\PyRIT\doc\demo\1_gandalf.py", line 51, in <module> from pyrit.chat import AzureOpenAIChat ModuleNotFoundError: No module named 'pyrit' I did nothing, just clone the repo mentioned in doc, and try o run, and I got the above error. Could you please help? "https://www.microsoft.com/en-us/security/blog/2024/02/22/announcing-microsofts-open-automation-framework-to-red-team-generative-ai-systems/"Problem with Bot configuration - Agent returned unsuccessful status code InternalServerError
I have a problem with the configuration of the bot in message-extension. I am using the app in MS Teams for both the bot (message-extension in channels only) and tabs for personal use. Everything locally worked. As I published for the organization, only tabs works, message-extension does not respond to the query and to the others, that is, the whole for the bot solution does not work. After checking in the console, I see something like this: Locally for the bot, I use the Bot Framework implemented by https://dev.teams.microsoft.com/, while the production version of the bot is generated for Azure as Azure Bot. This is the configuration I have for env local files: For the production version, on the other hand, I have these: In addition, the Bot was converted to ES6 language, I defined it in package.json to read the type as a module: The manifest.json is set up like this: ... I'm missing an idea of what to set in Azure or what to set in code to make message-extension start responding to user requests.... Could you advise me?
