Reputation: 131
I am using the latest MS Teams toolkit 4.1.3. After I used "Provision in the cloud" and "Deploy to the cloud" two deployment options to deploy my SSO enabled bot to the Azure and AAD, I don't see any "OAuth Connection Settings" were included to the Azure Bot Service created by toolkit (see below screenshot). Based on Enable SSO for your app, we need to configure an OAuth Connection setting for SSO working for Bot. can anyone explain if MS Teams toolkit is using the different approach for SSO? does OAuth connection still required for MS Teams bot with SSO?
Another question is that the toolkit created two AAD Applications for my bot application. One is for MS Teams app (Toolkit-tabsso(dev)-aad) and the other one (tabbtssobt65a851) is for bot itself. When I checked the toolkit-tabsso(dev)-aad's application ID URL, why it pointed to bot's AAD App instead of itself?
Upvotes: 0
Views: 211
Reputation: 1
If you are only trying to obtain currently logged-in Teams user identity, there’s a way to do SSO flow without setting up OAuth Connections. TeamsFx has a layer of SDK that handles token exchange and SSO prompts. You could refer to this sample, available in Teams Toolkit Sample Gallery as well. This sample implements SSO flow and makes a Graph API call to retrieve user profile photo.
Upvotes: 0