通过非交互式 powershell 脚本连接到 Microsoft Teams

Question

I am trying to write an azure function in PowerShell to connect to a Microsoft Teams account:

using namespace System.Net

# Input bindings are passed in via param block.
param($Request, $TriggerMetadata)

# Write to the Azure Functions log stream.
Write-Host "Running teams account setup."

[string]$userName = 'xxx'
[string]$userPassword = 'xxx'
[securestring]$secStringPassword = ConvertTo-SecureString $userPassword -AsPlainText -Force
Write-Host ($secStringPassword | Format-Table | Out-String)
[pscredential]$credentials = New-Object System.Management.Automation.PSCredential ($userName, $secStringPassword)
Write-Host ($credentials | Format-Table | Out-String)
Connect-MicrosoftTeams -Credential $credentials

The error message I'm getting is essentially: ERROR: password_required_for_managed_user: Password is required for managed user

I read that it might be necessary to replace -Credentials with -Identity , but I can't find any documentation on how to implement that.

Answer 1

Just noticed that you are using Azure Function, I am not quite sure the root reason here, but I did some test on my side and the PowerShell function with code below works for me perfectly:

using namespace System.Net

# Input bindings are passed in via param block.
param($Request, $TriggerMetadata)

$username = "<user Name>"
$passwd = "<PassWord>"

$secpasswd = ConvertTo-SecureString -String $passwd -AsPlainText -Force
$cred = New-Object Management.Automation.PSCredential ($username, $secpasswd)
Connect-MicrosoftTeams -Credential $cred

#try to get a team name to test if connect to teams successfully
$team = get-team -groupID '0d06e74e-08e0-4ef6-9bb5-3113ca735407'
$body = $team.DisplayName


# Associate values to output bindings by calling 'Push-OutputBinding'.
Push-OutputBinding -Name Response -Value ([HttpResponseContext]@{
    StatusCode = [HttpStatusCode]::OK
    Body = $body
})

Content of requirements.psd1 :

@{
    # For latest supported version, go to 'https://www.powershellgallery.com/packages/Az'. 
    'Az' = '5.*'
    'MicrosoftTeams' = '1.1.9-preview'
}

Test result:

Answer 2

Azure function utilize the Powershell core.

Looks like there is a known issue with regards to the Powershell core which has been reported to the product group and it is already worked.

Reference: https://github.com/MicrosoftDocs/office-docs-powershell/issues/5950

Reading further, I don't see ETA on this. The thread is expected to be updated once there is a fix.

Coming back to the -identity , it is just a switch parameter (you need not pass anything) which logs in using managed service identity in the current environment. I doubt this might be applicable in your case. The below would be the implementation if you would like to try.

Connect-MicrosoftTeams -Identity

Answer 3

To solve this issue, we have a third option of storing encrypted credentials to a file on the computer. The PowerShell script uses the encrypted password from the file to create a credential object. please go through below links. link1 Link2