Configure Microsoft Teams in Collaborate
Notice
This feature is available in Collaborate v3.7.1.0 onwards.
If you use Microsoft Teams as a collaborative tool, integrate Teams channels in Collaborate to publish alerts as messages in the respective channels. Analysts can post alerts to Microsoft Teams in the following ways:
Create a new alert, select the checkbox for Microsoft Teams in the alert creation form, and select the Teams channel.
Create an alert template and add active Teams channels in the template. When you create alerts from this template, the alert is posted to the respective Teams channels.
Auto-publish alerts from Cyware advisory and partner advisories to Microsoft Teams.
Create Incoming Webhooks in Microsoft Teams
Create an Incoming Webhook to your Microsoft Teams channel to enable Collaborate to share alerts in the channel. The webhook provides a unique URL that is used to integrate the channel in Collaborate. To add an Incoming Webhook to a Teams channel, see Create Incoming Webhooks. If you have already created an Incoming Webhook in the channel, copy the unique URL and integrate the channel in Collaborate. For more information, see Integrate Microsoft Teams Channel in Collaborate.
Note
Microsoft is deprecating Incoming Webhooks in Teams. It is recommended to create a Workflow and use the generated webhook link when configuring the channel in Collaborate. Existing webhook URLs may continue to function temporarily; however, update them with workflow URLs to ensure uninterrupted alert delivery.
Create Workflows in Microsoft Teams
Note
Workflow integration is supported in Collaborate v3.8.11.2 onwards.
Workflows in Microsoft Teams enable automated posting of alerts to a channel. Create a workflow in Microsoft Teams to generate a webhook link and use this link to integrate the channel in Collaborate. Microsoft is deprecating Incoming Webhooks. While your existing webhook URLs may continue to function temporarily, it is recommended to configure channels using Workflows to ensure continued compatibility.
Steps
To create a workflow in Microsoft Teams, follow these steps:
Sign in to Microsoft Teams.
Hover over the channel name, click the horizontal ellipsis, and click Workflows.
Search for and select the template Send webhook alerts to a channel.
Verify that the correct Team and Channel are selected, and click Save.
After saving, the webhook link will be generated. Copy the generated webhook link. This will serve as the new Webhook URL for Collaborate.
Integrate Microsoft Teams Channel in Collaborate
Configure Microsoft Teams channels in Collaborate to receive alerts as messages in the Teams channel. Analysts can configure a maximum of 25 channels in the Microsoft Teams integration.
Before you Start
Ensure that you have the View and Create permissions for Microsoft Teams in Roles and Permissions.
Ensure that you have the Incoming Webhook URL or the Workflow URL for the Microsoft Teams channel you want to add.
Steps
To configure a Teams channel in the Analyst Portal, follow these steps:
Go to Administration > Integrations > Third Party Integrations > Microsoft Teams.
Click Configure Channel and use the following information:
Enter the name of the Teams channel. The name can have up to 50 characters. This is a mandatory field.
Enter the Incoming Webhook URL or the Workflow URL that you copied from the Microsoft Teams channel. This is a mandatory field.
Note
If the channel was previously configured using an Incoming Webhook, it is recommended to create a corresponding workflow in Microsoft Teams and update the Webhook URL with the newly generated workflow link. This ensures uninterrupted alert delivery as legacy webhooks are being deprecated. For more information about creating workflows, see Create Workflows in Microsoft Teams.
Click Test Connection to send a test message to the Teams channel that you want to send alerts to.
Turn on the Status toggle to make the channel active in the Analyst Portal. By default, the toggle is turned on. You can have a maximum of 10 active channels. You can send alerts only to active channels.
Turn on the Publish Automated Alerts toggle to auto-publish alerts from RSS, Cyware, and Partner advisories to the channel. By default, the toggle is turned off.
Select Post Alert title with URL to share the title of the alert along with the alert URL to the Microsoft Teams channel. When members click the URL, they can view the complete alert in the Member Portal. Members can view the alert in the Member Portal only if they are part of the recipient group.
Select Post complete alert content to share the complete alert details to the Microsoft Teams channel. You can view the alert title, summary, additional information, category, TLP, and threat indicators of the alert in the Teams channel.
Click Configure Channel to add the channel to the Analyst Portal. You can now post alerts to the channel while creating alerts. In the published alert, you can view details of the Teams channel the alert is posted to in the Other Details section. For more information, see Post Alert to Other Applications.
Manage Microsoft Teams Channels
Administrators can view and edit the details of integrated Microsoft Teams channels. Go to Administration > Integrations > Microsoft Teams and use the following information:
To delete a channel, hover over the channel name and click Delete.
To edit a channel, hover over the channel name and click Edit.
Search for a channel by its name and view details.