1. After Integration
After successful configuration, users in your organization will be able to access the Alibaba Cloud Enterprise Service app within Microsoft Teams. Within the app, you can communicate with TAMs in real-time, receive support ticket notifications, and track service progress, enjoy a seamlessly integrated exclusive support experience.
2. Preparation
2.1 Permission Requirements
Before starting the configuration, please ensure you have the following permissions:
• Microsoft 365 Global Administrator permissions or Azure AD Administrator permissions
• Teams Administrator permissions (for publishing apps)
2.2 Environment Requirements
Please ensure you have prepared the following environment:
• A valid Microsoft 365 subscription
• A network environment with access to the Azure Portal
• Microsoft Teams desktop version installed or access to Teams web version
2.3 Information to Record
During the configuration process, you need to record the following key information. Please prepare a recording tool in advance:
• Application (Client) ID - The Application (Client) ID generated after Azure AD app registration (Obtained in 3.1-Step 1)
• Directory (Tenant) ID - The Directory Tenant ID to which the Azure AD app registration belongs (Obtained in 3.1-Step 1)
• Client Secret - The Azure AD client secret value (Obtained in 3.1-Step 3)
• Scope ID (GUID) - The Scope GUID generated when adding a scope (Obtained in 3.1-Step 5)
3. Deployment and Configuration Process
3.1 Azure AD App Registration
Step 1: Create App Registration
1. Open your browser and visit the Azure Portal: https://portal.azure.com
2. Log in using your Microsoft 365 Administrator account.
3. In the search bar at the top, search for App registrations.
4. Click the + New registration button.
5. Fill in the registration form:
• Name: Alibaba Cloud Exclusive Service (or another name you deem appropriate)
• Supported account types: Select Single tenant only
• Redirect URI: Select Web for Platform, leave the URL empty for now
6. Click the Register button to complete creation.
7. After successful creation, record the Application (client) ID and Directory (tenant) ID.
Step 2: Configure Authentication
1. In the left navigation bar of the App registration page, click Manage - Authentication (Preview).
2. Under Web > Redirect URI, click Add URI and add the following addresses (replace ${Application (Client) ID} with your actual Client ID):
https://ailink.gts.work/teams/${Application(Client) ID}
https://ailink.gts.work/teams/${Application(Client) ID}/workbench
https://ailink.gts.work/thirdparty/teams/${Application(Client) ID}/login
https://ailink.gts.work/thirdparty/teams/${Application(Client) ID}/oauth2/callback
https://ailink.gts.work/teams/${Application(Client) ID}/person/inviteToGroup
3. In the Implicit grant and hybrid flows section, check the following options:
• Access tokens (used for implicit flows)
• ID tokens (used for implicit and hybrid flows)
4. Click the Configure button.
Step 3: Create Client Secret
1. In the left navigation bar, click Certificates & secrets.
2. Click + New client secret.
3. Fill in the following information:
• Description: Teams App Secret
• Expires: Select an appropriate period (24 months is recommended)
4. Click the Add button.
Please copy the generated Value immediately. It cannot be viewed again after closing the page. Save it as the Client Secret.
Step 4: Configure API Permissions
1. In the left navigation bar, click API permissions.
2. Click + Add a permission.
3. Select Microsoft Graph.
4. Select Delegated permissions.
5. Search for and check User.Read.
6. Click Add permissions.
7. (Optional) If you have administrator permissions, click Grant admin consent for [Your Organization].
Step 5: Expose an API
1. In the left navigation bar, click Expose an API.
2. Set the Application ID URI:
• Click the Add button
• Enter: api://ailink.gts.work/${Application (Client) ID}
• Click Save
3. Add a scope:
• Click + Add a scope
• Fill in the following information:
Scope name: access_as_user
Who can consent: Admins and users
Admin consent display name: Teams can access the app's Web APIs
Admin consent description: Allows Teams to call the app's Web APIs as the current user
User consent display name: Teams can access the app's Web APIs and make requests on your behalf
User consent description: Allows Teams to call this app's Web APIs with the same permissions you have
7. State: Enabled
• Click Add scope
• Copy the Scope ID (GUID) and save it as Scope ID (GUID)
Step 6: Add Pre-authorized Client Applications
1. On the Expose an API page, click + Add a client application.
2. Add the following Client IDs sequentially (add one at a time):
Client ID | Application |
1fec8e78-bce4-4aaf-ab1b-5451cc387264 | Teams Web |
5e3ce6c0-2b1f-4285-8d4b-75ee78787346 | Teams Desktop |
d3590ed6-52b3-4102-aeff-aad2292ab01c | Microsoft Office |
00000002-0000-0ff1-ce00-000000000000 | Office 365 Exchange Online |
bc59ab01-8403-45c6-8796-ac3ef710b3e3 | Outlook Desktop |
0ec893e0-5785-4de6-99da-4ed124e5296c | Outlook Web |
4765445b-32c6-49b0-83e6-1d93765276ca | Outlook Mobile |
4345a7b9-9a63-4910-a426-35363201d503 | Office Mobile |
3. For each client application:
• Enter the Client ID
• Check the access_as_user scope
• Click Add application
3.2 Teams Developer Portal Configuration
Step 1: Access Teams Developer Portal
1. Open your browser and visit the Teams Developer Portal: https://dev.teams.microsoft.com
2. Log in using the same Microsoft 365 Administrator account.
Step 2: Create New App
1. In the left navigation bar, click Apps.
2. Click the + New app button.
3. Enter the app name: Alibaba Cloud Enterprise Service (or another name you deem appropriate)
4. Click Create.
Step 3: Configure Basic Information
1. In the app editor, go to the Basic information section.
2. Fill in the following information:
• Short name: Alibaba Cloud Service
• Full name: Alibaba Cloud Enterprise Service
• Short description: Alibaba Cloud Service
• Full description: Alibaba Cloud Enterprise Service
• Developer name: Your Company Name
• Website: https://yourcompany.com(Your company website)
• Privacy policy: https://yourcompany.com/privacy(Your company website)
• Terms of use: https://yourcompany.com/terms(Your company website)
• Application (Client) ID: Paste your Application (Client) ID
3. Upload icons:
• Color icon: Upload color.png (192x192 pixels)
• Outline icon: Upload outline.png (32x32 pixels)
4. Set accent color: #60A18E (or your preferred color)
5. Click Save.
Step 4: Configure Personal Tab
1. Under Configure in the left navigation bar, click App features.
2. Click Personal apps.
3. Click + Add a personal tab.
4. Fill in the following information:
• Name: Alibaba Cloud Enterprise Service
• Entity ID: Default value
• Content URL: https://ailink.gts.work/teams/${Application(Client) ID}/workbench
• Website URL: Leave empty or same as Content URL
5. Click Confirm.
Step 5: Configure Single Sign-On (SSO)
1. Under Configure in the left navigation bar, click Single sign-on.
2. Enter the Application ID URI:
• This value must match exactly the value set in Expose an API in Azure AD (the value you filled in Step 5)
3. Click Save.
Step 6: Configure Domains
1. Under Configure in the left navigation bar, click Domains.
2. Click + Add domain.
3. Enter ailink.gts.work (without https://)
4. Click Add.
4. Publishing and Distributing the App
4.1 Validate App
1. In the developer portal, click Publish in the left navigation bar.
2. Click App validation.
3. The portal will automatically validate your app.
4. Fix any errors according to the validation report.
4.2 Submit to Organization App Catalog
1. After validation passes, click Publish to your organization.
2. Your app will be submitted to the organization's app catalog.
3. Record the ID of the published app for later use.
4.3 Admin Approval (If Required)
1.If your organization requires admin approval:
• Visit Teams Admin Center: https://admin.teams.microsoft.com
• Log in using a Teams administrator account.
• Navigate to Teams apps > Manage apps.
• Find your app (may be in Pending approval).
• Click the app name.
2.Click Allow or Publish.
5. Installation and Testing
5.1 Alibaba Cloud Official Website - Enterprise Value-Added Service Desk Configuration
1. Open Alibaba Cloud Value-Added Service Desk - My Expert Service- Channel Management - Add Channel - Teams.
2. Fill in the following configuration into the configuration items (note to replace with your actual configuration items):
{
"appId": "{Application (Client) ID}",
"appSecret": "{Client Secret}",
"tenantId": "{Directory (Tenant) ID}",
"teamsPublishedAppId": "{Scope ID (GUID)}"
}
5.2 Install App
1. Open Microsoft Teams (Web version or Desktop version).
2. Click Apps in the left navigation bar.
3. Click the Built for your organization section.
4. Find the Alibaba Cloud Exclusive Service app (or the app name you set).
5. Click Add to complete installation.
5.3 Verify Functions
1. After installation, the app will appear in the Teams left navigation bar.
2. Click the app icon to verify if the Workbench page loads normally.
3. Test if the Single Sign-On function works normally.
If you encounter any other issues, please contact your Alibaba Cloud Technical Account Manager (TAM) for assistance.