Skip to main content

Microsoft Teams - User Guide

In this article, you will understand step by step how to easily integrate Scytale with Microsoft Teams

Microsoft Teams is Microsoft's collaboration platform for chat, meetings, and file sharing, built on Microsoft 365 groups and Microsoft Entra ID. Scytale reads Teams membership and role data to produce user access review evidence — it never reads message content.

Required Permissions

  • read: Team.ReadBasic.All

  • read: TeamMember.Read.All

  • read: User.Read.All

Scytale follows the least-privilege principle, limiting permission scopes strictly to what's required for reliable audit evidence collection.

How to Connect

  1. In Scytale, go to 'Integrations'.

  2. Search for Microsoft Teams and select 'Connect'.

  3. Paste your directory (tenant) ID, application (client) ID & client secret value.

  4. Add a connection name — this will be used to differentiate between your connections — and then select 'Connect'.

  5. You will be redirected to Microsoft to grant admin consent for your tenant. Sign in with an account that has administrator permissions and approve the requested permissions.

You have now successfully connected to Microsoft Teams.

How to Generate Credentials in Microsoft Teams

  1. Log in to the Azure portal and go to Microsoft Entra ID.

  2. In the left menu, select 'App registrations' and then 'New registration'.

  3. Enter a name for the application — for example, scytale-teams-integration — set the supported account types to 'Accounts in this organizational directory only (Single tenant)', and then select 'Register'.
    ​
    Ensure the Redirect URI is set to "Web" and either:
    ​
    ​US:
    ​https://api.scytale.ai/integrations/microsoft_teams/installation/callback
    ​
    ​EU:
    ​https://api.eu.scytale.ai/integrations/microsoft_teams/installation/callback
    ​
    ​


    ​
    ​

  4. On the application's 'Overview' page, copy the application (client) ID and the directory (tenant) ID.

  5. In the application, go to 'Certificates & secrets' and select 'New client secret'.

  6. Enter a description, set an expiry — 730 days (24 months) is recommended — and then select 'Add'.

  7. Copy the secret 'Value', not the 'Secret ID'. Must be at least 32 characters.

    Note: The value is displayed only once.

  8. Go to 'API permissions', select 'Add a permission', choose 'Microsoft Graph', and then select 'Application permissions'.

  9. Add the three permissions listed under Required Permissions above, and then select 'Grant admin consent' for your tenant.

    Note: You will also be asked to grant admin consent when you connect in Scytale.

Related Articles
Did this answer your question?