Configuring Microsoft Teams

This section explains how to configure Microsoft Teams in Brightspot.

To configure Microsoft Teams on Microsoft:

1. Ensure that an application has been registered with the Microsoft identity platform (see Step 1 in Adding a Microsoft App). Copy and save the application's Client ID, Tenant ID, and Client Secret values.
2. Create an Azure Bot resource via the Azure dashboard or Azure CLI by selecting Use existing app registration and entering your existing Client ID and Client Secret.
3. Navigate to the Configuration page and provide the following messaging endpoint: https://[YOUR_BRIGHTSPOT_CMS_DOMAIN]/microsoft/teams/api/messages.
4. Connect a bot to Microsoft Teams. Once connected, copy and save the address of the Open in Teams link under the Action column.
5. Log in to Brightspot.
6. Click menu> Admin > Sites & Settings > Sites > Global.
7. Click search, located to the left of more_horiz, and type Microsoft Teams.
8. Under Account for App Installation, click the button to be redirected to Microsoft to authenticate. You redirect back to Brightspot after authentication, and you are prompted to save your settings to activate the admin account.
   
   Note

   Only Microsoft admins are able to authenticate this Microsoft account. If a user other than an admin attempts to authenticate, the attempt fails.
   
   Once a Microsoft admin authenticates with Microsoft, Brightspot associates the admin's account with the Brightspot user account. The Account for App Installation field in Brightspot then converts to a read-only field.
9. Under App for Team Bot, click search to search for an existing Microsoft app.
10. Under Teams Bot URL, select a bot by pasting the address of the Open in Teams link that you copied in Step 4.
11. Toggle on Allow App Selection for Notification to allow editors to choose an app for notification in their profile. Enable this toggle in multi-tenant environments.
12. Click Save.

Configuring how end-users consent to applications in Azure dashboard:

End users may not be able to grant permissions to the Brightspot app depending on the user consent settings in Azure. If users are required to submit an approval request to an admin when they sign in with Microsoft via Brightspot, you can configure how end-users consent to applications using Azure Active Directory. If you decide to allow users to consent for permission classified as low impact, add the following permissions: Channel.ReadBasic.All, Team.ReadBasic.All, offline_access, openid, profile, User.Read.

Configuring Brightspot Teams App in Microsoft and Azure dashboards:

1. Modify manifest.json by replacing [DOMAIN], [BOT_APP_ID], [PATH_TO_PRIVACY_POLICY_URL], [PATH_TO_TOU_URL] with proper values. For more information, see the manifest.json references.
2. Zip the files in the app directory and upload the .zip to the organization's app store. You can also manage your apps in the Microsoft Teams admin center.