在应用工作室中创建聊天机器人时，将 MS Teams Bot 链接到 Azure AD 应用

Question

In the organization where I am trying to deploy a chatbot in MS Teams, because of security posture and separation of responsibilities, the MS Teams' admin team (different from bot developers), cannot create a new Azure AD app when creating a bot in App Studio. The authorization to create Azure AD app is only with AAD team.

To work with this process, we requested and got an application created in AAD via AAD Team. After creation of AAD app, the AAD team also gave us application name, application id and object id; Now, the MS Teams' admin team is asking for process/documentation to link chatbot to be created in app studio to AAD app. Can someone share these instructions or point to any existing ones? (I couldn't find any in my searches).

Answer 1

The short answer is that this needs to go into the "botId" section in the Teams app manifest (see here for refence: https://learn.microsoft.com/en-us/microsoftteams/platform/resources/schema/manifest-schema ). Longer answers:

1. You might not be editing a manifest directly - you are doing it in App Studio, so just go to the Bot section and that's where you capture the Bot ID

2. It sounds like there is a missing piece in what you are trying to do. You need:

   a. an Azure Application (got)
   b. a Teams app where you can capture the Azure App ID as bot id (got)
   c. a 'Bot' registration in Azure (it's a kind of Azure resource) - have you got this already? If not, someone with Azure access will need to create it.

There is a section in the wizard to use an existing Azure Application - you'd need to select that and enter the Azure application id.

Here's more info on doing the bot registration: https://learn.microsoft.com/en-us/azure/bot-service/abs-quickstart?view=azure-bot-service-4.0&tabs=userassigned . For the screenshot in section 6, I recommend choosing "Multi-tenant" as the app type (then you can skip the 'Bot identity information' section later), and for 'Creation Type' is where you want to link to the already-created Azure Application.

Also note the "pricing tier" - by default it's on "standard", but you can change to the "free" tier to see if that's sufficient for you - your bot needs to be handling a lot of message to need to move up to the paid tier.

Answer 2

What I did end up doing was:

1. Create an app registration in azure with a secret. The secret becomes bot password in teams.
2. Create a bot using https://dev.botframework.com/bots . Since my app/bot is single tenant, I needed to be able to create a bot without azure service which requires subscription. I enabled Teams for this bot, besides web chat which is enabled by default.
3. Create an app using app studio, referencing the azure app and bot from botframework.