MC1171846 – Microsoft Teams: Agent and bot support for Entra authentication in group chats (archived)

Product:

Teams

Platform:

Android, Developer, iOS, Mac, Online, US Instances, Windows Desktop, World tenant

Status:

Feature Rollout Status Not Supported

Change type:

Feature update, User impact, Admin impact

Links:

503557

Details:

Summary:
Microsoft Teams group chat agents and bots will support Entra authentication starting November 3-6, 2025. Users without the Teams app or Entra consent receive a private prompt to install the app and grant permissions. This feature is enabled by default, requiring no admin action.

Details:
Agents and bots in Microsoft Teams group chats will now be able to authenticate through Entra. When an app requests a user's Entra token in a group chat, if that user does not have the Teams app installed and/or has not granted Entra consent, they are sent a targeted message. This targeted message is only visible to that user and serves two purposes: to prompt the user to install the Teams app and to open the Entra permission consent dialog. Once both requirements are met, the app can leverage Entra for the requested permissions (such as Graph).
This message is associated with Microsoft 365 Roadmap ID 503557.
[When this will happen:]
General Availability (Worldwide): Begins November 3, 2025, and completes by November 6, 2025
General Availability (GCC): Begins and completes November 6, 2025.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:

Created:
2025-10-14

updated:
2025-10-14

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

Pictures

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

User Experience Disruption
Users without the Teams app or Entra consent will receive a targeted message prompting them to install the Teams app and grant permissions, potentially causing confusion and disruption in group chats.
   - roles: End Users, Support Staff
   - references: https://learn.microsoft.com/microsoftteams/platform/bots/how-to/authentication/bot-sso-overview, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=503557

Increased Support Requests
The rollout may lead to an increase in support requests from users who encounter issues with the new authentication process, particularly those unfamiliar with Entra consent.
   - roles: Support Staff, IT Administrators
   - references: https://learn.microsoft.com/microsoftteams/platform/bots/how-to/authentication/bot-sso-overview, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=503557

Configutation Options**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

Microsoft Teams is introducing a new feature that allows agents and bots in group chats to authenticate using Entra, a security and identity management tool. Imagine you're hosting a party, and you have a guest list at the door. Previously, you could only check the guest list for people arriving alone. Now, you can also check the list for people arriving in groups. This means you can ensure everyone in the group is allowed into the party.

In practical terms, if you're chatting in a group on Microsoft Teams and an app needs to verify your identity using Entra, it will send you a private message. This message is like a friendly tap on the shoulder, reminding you to install the Teams app and agree to share your information with Entra. Once you do this, the app can access the information it needs, just like a guest at the party showing their invitation to enter.

This feature will be available worldwide between November 3 and November 6, 2025, and it will automatically be turned on, so there's no need for any administrative setup. If any issues arise with the bots or agents related to Entra authentication, it would be wise to contact the application developer to address these concerns. Some apps might need a little tweak to ensure they work smoothly with this new setup, similar to adjusting a recipe to make sure it tastes just right.

There are no specific compliance concerns identified with this update, but it's always a good idea to review how this change fits with your organization's policies. For more detailed guidance, you can explore Microsoft's resources on enabling single sign-on for your app in Microsoft Teams.