Microsoft Teams Notification Integration

05/2022 - rev 2

Overview

Oort can integrate with one or more Microsoft Teams instances to provide notifications and in some cases automation of frequently recurring identity tasks.

Audience

This document is intended for identity security, IAM, and IT administrators responsible for integrations between identity, security, and collaboration platforms, including notifications, alerting, and incident remediation.

Benefits

Integrating the Oort platform with your Teams environment allows for fast notification and remediation of both failed identity health checks and also individual user identity issues or investigations.

screenshot 2022 05 12 140950

For more information, please see the corresponding article detailing different types of notifications and collaboration available from Oort.

Requirements

The following requirements exist for the Teams notifications integration:

  1. Azure AD must first be configured in your Oort tenant for Azure tenant that underlies your Teams environment.
  2. A Teams admin account is required to upload the Oort Bot for Teams via the Teams admin center.
  3. A Team or Channel owner role is required to add the Oort Bot app to the desired channel.

High-level Integration Steps

The current steps to configure this functionality are as follows.

  1. Configure the Azure AD integration for your Oort team to the corresponding Azure tenant where the Teams environment resides (required).
  2. Contact your Oort representative or email solutions@oort.io to inform them that you would like to enable Teams notifications as a feature.
  3. The Oort team will provide the Oort Teams bot installation package.
  4. Install the Oort Teams communication bot in your Teams tenant as an administrator
  5. Configure Teams notifications for the desired checks and events in the Oort console.

Installing the Oort app in your Teams environment

  1. From within the Teams admin center console, select Teams apps -> Manage apps.

    screenshot 2022 05 12 123821

  2. Click + Upload and then Upload again.

    screenshot 2022 05 12 123909

  3. Select the ZIP file provided by the Oort solutions team and upload it.

  4. After successful upload, click the link to manage the app.

    screenshot 2022 05 12 124638

  5. From here you will be see the details of the app.

    screenshot 2022 05 12 124732

Adding the Oort app to a Teams channel or team

To add the app to a Team or Channel, perform the following steps.

Note - You must be signed into Teams with an account that has the Owner role for the Team and Channel where you want to install the Oort Bot for use in your organization.

  1. Select the desired Team and click the three dot menu. Select Manage team.

    screenshot 2022 05 12 124942

  2. Select the Apps tab and then More apps button on the right. Click the Oort Bot. If there are many apps under Built for your org, then click See all on the right side.

    screenshot 2022 05 12 125053

  3. Click Add to a team.

    screenshot 2022 05 12 125200

  4. Select the desired Team and channel and click Install bot.

    screenshot 2022 05 12 125243

  5. If you a receive a Something went wrong message, this means that the account you're signed into Teams with is not an owner of that Team or channel and doesn't have permissions to install applications. Sign out and sign in with an account that is an owner of the desired Team.

  6. From the Manage channel -> Apps tab, you should now see the Oort Bot in your app list.

    screenshot 2022 05 12 130006

Please proceed to the next section.

Adding a Teams notification target in Oort

  1. Within your Oort tenant console, navigate to Integrations and Add Integration. You should now see a Microsoft Teams tile under the Notification Targets category.

    screenshot 2022 05 12 130234

  2. Click + Add MS Teams Target

  3. Provide a Name and Description for the notification target. NOTE - more than one target can be configured to the same Teams tenant.

  4. Select either Failed checks or Data collection, or both, for the types of notifications to send to this target.

    1. Failed checks notifications provide Teams notifications on a daily basis of net-new users failing specific health checks. Please see below.
    2. Data collection provides a daily update notification upon successful user data collection from one or more integrations.
  5. Select the desired Microsoft Teams environment.

  6. Enter the desired channel name where the notifications should go to.

    screenshot 2022 05 12 130645

  7. Click Save.

  8. You will now see a Teams entry for both Instant Messaging (direct msgs to users or their managers) and Notification targets.

    screenshot 2022 05 12 130727

  9. You can test connectivity using the three dot menu on the right side of the integration object.

    screenshot 2022 05 12 130749

  10. A successful test message will be sent to the channel

    screenshot 2022 05 12 130812

Configuring Teams Notifications for Oort Checks

Now that the Teams integration is in place, configure one or more health check types to send notifications to the configured channel.

For example, for the Inactive Users check, you can send Failure Reports to the Teams notification targets once a day. This occurs when data is collected and processed by Oort.

screenshot 2022 05 12 130933

You can also send direct messages to users or their manager upon failure of a particular check. This is useful when the user or the manager can take direct action to remediate the issue.

For example, a manager of an inactive user can submit a ticket or begin the process to deactivate an inactive user account if that user no longer needs access.

screenshot 2022 05 12 131015

Deleting the Oort app for Teams

Should it be necessary to delete the Oort app from your Teams environment, simply find it in the Manage apps screen and click it to see details.

From this screen, the three dot menu will provide an option for Actions -> Delete.

screenshot 2022 05 12 124408