Configure a Microsoft Teams Integration in Risk Cloud

Prerequisites

In order to configure the integration, you will need the following:

• One of the following roles in Microsoft Entra: Global Administrator, Privileged Role
  Administrator, User Administrator, Privileged Authentication Administrator, License
  Administrator
• Your Microsoft Teams Directory (tenant) ID
• A Entra user to act as the service account for the integration

Create the Risk Cloud Teams User in Entra

1. In Entra ID, navigate to Users
2. Click Create new user
3. Select Create new user
4. Create a new user with a name and email that will identify it as a Risk Cloud integration
5. Disable Per-user MFA
6. Assign any necessary Group memberships and Licenses your organization requires to
   interact with the Teams channels and members that Risk Cloud will send notifications
   to

Create the Risk Cloud Teams Application in Entra

1. In Entra ID, navigate to App registrations 
2. Click New Registration 
3. Enter a name that will identify the application as your Risk Cloud integration 
4. For “Who can use this application or access this API?” select “Accounts in this organizational directory only” 
5. Click Register 
6. Copy the Directory (tenant) ID which will be used later in Risk Cloud
7. Select API Permissions 
8. Add the following permissions
   1. ChannelMessage.Send
   2. Chat.Create
   3. ChatMessage.Send
   4. Group.Read.All
   5. offline_access
   6. Team.ReadBasic.All
   7. TeamMember.Read.All
   8. TeamsUserConfiguration.Read.All
   9. User.Read
   10. User.ReadBasic.All
9. Click Authentication 
10. Set “Allow public client flows” to No

Connect your Teams Integration to Risk Cloud

1. Log in to the Risk Cloud as an administrator and navigate to Admin -> Integrations

2. Find the Microsoft Teams integration card. After Logicgate's Product Support team enable Microsoft Teams integration for your organization, you should see the Enabled status. Click the setting gear on the top-right of the card. Then click Configure.

 

3. Enter Directory (Tenant) ID, and click Login with Microsoft. This Directory (Tenant) ID was created during the initial setup process in the Create the Risk Cloud Teams Application in Entra section

 

4. Follow Microsoft Authentication Pop-ups. You need to use the Microsoft Teams user's username and permanent password you created during the initial setup process to Configure a Microsoft Teams User in Azure for Integration with Risk Cloud.

 

5. Once you complete the account log in, you will see the integration configuration Success message.

 

 

6. Once the integration is enabled, you can confirm that your Teams Integration is connected by navigating to Build Tab > Job in Risk Cloud. Select any Job Trigger, then confirm if Send Teams Message appears as one of the Operation options.

 

7. If you don't see Send Teams Message, please reach out to your Azure / Microsoft Admin to troubleshoot by checking that the steps in the Create the Risk Cloud Teams User in Entra and Create The Risk Cloud Teams Application in Entra sections of this article were followed.

Especially, make sure Microsoft Graph permissions are granted for Risk Cloud Application.

 

8. If you see Send Teams Message, then you can follow this article to continue creating a Job with Teams!

 

Legacy Authentication Flow

Important updates:

Starting 1/20/2025, we have updated the Microsoft Teams integration to OAuth 2.0 to enhance security, improve user experience, and align with modern authentication standards.

• If your organization HAS NOT set up the Microsoft Teams Integration on Risk Cloud, please follow the steps below.
• If your organization HAS ALREADY set up the integration, you can continue using the Legacy Authentication Flow and Job Operations previously configured using Teams Integration. However, we strongly encourage you to switch to the updated authentication method. You should contact your CSM for migration guidance. We will no longer enhance the legacy authentication method using the "Allow Public Client Flows" setup.

 

1. Enter Application ID, Directory ID, Username and Password to configure the integration.

2. These information are setup during the process to Configure a Microsoft Teams User in Azure for Integration with Risk Cloud.