Application Configuration in Azure Portal for OAuth2 Account to use in Teams

Overview

The Snaps in the Microsoft Teams Snap Pack require an OAuth2 account to access the resources in Azure. For the OAuth2 account to authorize successfully, create, and configure an application corresponding to the account as shown in the workflow.

Open

Prerequisites

An Azure account with a free subscription to create the application.

Key Steps in the Workflow

Create an Application in the Azure Portal

1. Log in to the Microsoft Azure Portal.

2. Navigate to Azure services > Microsoft Entra ID.

3. Navigate to Add > App registration.

4. On the Register an application page, specify the name for registering the application and click Register. Learn more about creating an application at Quickstart: Register an app in the Microsoft identity platform - Microsoft identity platform.

Define Permissions

The Teams Online Snap Pack supports the following three types of accounts:

• Teams Dynamic OAuth2 Account

• Teams OAuth2 User Account

• Teams Application OAuth2 Account

The permissions for the registered application are either Delegated or Application permissions based on the account types. Select Delegated permissions for OAuth2 User Accounts and Application permission for OAuth2 Application Accounts.

1. On the left navigation panel, navigate to Manage, select API permissions > Add a permission.

   Open

   

2. On the Request API permissions window, select Microsoft Graph > Delegated permissions for the OAuth2 User account and Application permissions for the OAuth2 Application Account.
   
   

3. Select the required permissions from Files, Users, and Teams. Choose the minimum API permissions listed under Scopes and Permissions Required for Teams.

4. Click Add Permissions. View all the permissions added under Configured permissions.
   
   

    

5. Click Grant admin consent confirmation and select Yes.
   
   

6. In the navigation panel, click Overview and select Add a Redirect URI. You will be redirected to the Platform configurations page.
   
   

    

   1. Under Platform configurations, click Add a platform.
      
      

      The Configure platforms window displays.

   2. Select Web and specify the Redirect URI in the following format: 
      https://<control-plane-name>.snaplogic.com/api/1/rest/admin/oauth2callback/<snap-pack-name>
      where the <control-plane-name> corresponds to the domain part of your SnapLogic URL—elastic (global control plane) or emea (EMEA control plane).
      For example:
      https://emea.snaplogic.com/api/1/rest/admin/oauth2callback/teams
https://elastic.snaplogic.com/api/1/rest/admin/oauth2callback/teams

   3. Select Web and specify either of the following Redirect URIs based on the region your server is located:
      
      

   4. Click Configure. A popup message displays indicating that the application is successfully updated.

7. On the Platform configurations page, click Save.
   
   

Locate the Application Credentials in the Azure Portal

To authorize your account in SnapLogic, you must have the following application credentials:

• Application (Client) ID

• Directory (Tenant) ID

• Client secret value

1. On the application page, navigate to Overview.

2. Under Essentials, note the Application (client) ID and Directory (tenant) ID needed for the Snap account.

3. In the navigation panel, select Manage > Certificates & secrets.

4. On the Certificates & secrets page, click + New client secret.

5. In the Add a client secret window, enter the Description, select an option for Expires from the dropdown list, and click Add. 

   The Client value and Secret ID are generated. This value and ID are required to configure the OAuth2 account.
   
   

Scopes and Permissions Required for Teams API

Microsoft Teams exposes a few granular permissions that control the access that apps have to resources. When users sign into your app, they are required to consent to these permissions.