SSO integration in Teams

[Galasso]

Hi all,

as stated here "SSO is only supported on the live website publication channel."

Does exist a roadmap for the SSO integration in the other channels, especially in Teams?

For when we can expect new releases?

Thanks,

Alessandro.

[renatoromao · Accepted solution]

Hi @Galasso ,

We don't have dates for this release, but the Microsoft team is working on it to available as soon as possible.

You can follow the new releases here: https://docs.microsoft.com/en-us/power-platform-release-plan/2020wave2/power-virtual-agents/planned-...

[Galasso]

Thanks for the answer Renato. I was missing the plan page.

[renatoromao · Accepted solution]

Hi @Galasso 

Now it's available to use SSO with Microsoft Teams in Public Preview. You can now configure your bots to automatically use Teams’ authentication, so their end users don’t have to sign-in when chatting with a PVA bot in the Teams channel, streamlining the user’s experience.

Power Virtual Agents support for Teams channel Single Sign-on is available in Public Preview | Micro...

[aksridhar1]

I see that on 01/12/2021 there has been an announcement that now Teams SSO is available without having the user to sign in again. I do have a question regarding this - If I want the bot to be available in both web and teams channel then I believe I need to still setup manual "Generic oauth2" and I cannot use "teams only". If this is right then I see that it is prompting for login in teams every time I restart Teams. Is there any other change needed in AAD app registration along with this? I certainly do not want the login window to show up in teams

[aksridhar1]

I was able to get this addressed with the generic oauth and updating the token exchange URI. I am now using the same oauth app to connect to sharepoint online webpage as well as teams integration. It works seamlessly.

[nk1ng]

So you are don't getting that pop up anymore, @aksridhar1?  The OTP from https://token.botframework.com/api/oauth/signin?signin=blahblahblahcode_challenge?

That is correct?  I don't need or want that OTP to show up ever lol.  Trying to follow this tutorial but I am struggling:  Configure single sign-on for the Power Virtual Agents app in Teams - Power Virtual Agents | Microsof...?  Let me know!

-n

[aksridhar1]

That is right @nk1ng . if the request for the bot is authenticated properly using MSAL, the bot should bot show this prompt. This is due to the fact that bot does not recognize the user. 

Read through the fix that I shared here - Solved: Re: How to configure SSO on a intranet page (Share... - Power Platform Community (microsoft....

[nk1ng]

So you have to publish a custom canvas on the same network? Not using the https://token.botframework.com/api/oauth/ whatever? I need to fix this if that is true, @aksridhar1?

[nk1ng]

@aksridhar1, I mean you have to publish an index.html with MSAL.js somewhere for SSO (in Teams)?  Do you need to have that externally and access to the internet (and same domain that is hosting the bot)?  So prolly if you want to use SSO on our phones you have do, huh?  Because, we don't have a custom HTML websites set up for this yet, just using the default endpoints trying to get everything up and running but the OTP will show up until we have a custom logon card?  Still trying to understand everything..  

Thank you for your help guys, also excuse my English, I had a stroke awhile back and my grammar is still struggling.  Let me know if you need any more info on my setup :).