503557 – Microsoft Teams: Agent & bot support for Entra authentication in group chats

Product:

Teams

Platform:

Android, Developer, iOS, Mac, US Instances, Windows Desktop, World tenant

Status:

In development

Change type:

Links:

MC1171846

Details:

Agents & bots in group chats will now be able to authenticate through Entra. When an app requests a user's Entra token in a group chat, if that user does not have the app installed or Entra consent, they are sent a targeted message. This targeted message is only visible to that user. This message serves two purposes: to ask the user to install the Teams app personally and to open the Entra permission consent dialog. Once both requirements are met, the app can leverage Entra for the requested permissions (e.g., Graph).

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability

Created:
2025-09-18

updated:
2025-09-18

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Please, look at the most relevant linked item for details

explanation for non-techies**

Imagine you're at a networking event. You want to introduce a friend to a group, but first, you need to make sure your friend has permission to join the conversation. This is similar to what's happening with Microsoft Teams and Entra authentication for agents and bots in group chats.

In this scenario, Microsoft Teams is like the networking event, and the agents and bots are like your friend. Entra is the security system that ensures only the right people join the conversation. When an app (your friend) wants to join a group chat (the networking event), it needs permission from each user in the chat.

If a user hasn't installed the app or given permission (like not knowing your friend), they receive a private message. This message is like you pulling them aside to introduce your friend and ask if it's okay for them to join. The message prompts the user to install the app and grant the necessary permissions through Entra. Once the user agrees, the app can participate in the chat, just like your friend joining the conversation after getting the green light.

This process ensures that only authorized apps can access certain information or perform specific actions, much like ensuring only invited guests join a private discussion. It helps maintain security and privacy in group chats, allowing users to control which apps have access to their data.