Support:Microsoft Teams Channel

Step 1: Create App Registration

1. Go to the Azure Portal.

2. Sign in with your Microsoft 365 administrator account.

3. Search for App registrations.

4. Click + New registration.

5. Complete the registration form:

• Name: Alibaba Cloud Exclusive Service (or your preferred name)

• Supported account types: Select Single tenant only

• Redirect URI: Select Web for Platform, leave the URL empty for now

6. Click Register.

7. Record the Application (client) ID and Directory (tenant) ID.

Step 2: Configure Authentication

1. In the left navigation, click Manage > Authentication (Preview).

2. Under Web > Redirect URI, click Add URI and add the following addresses. Replace ${Application (Client) ID} with your actual Client ID:

https://ailink.gts.work/teams/${Application(Client) ID}

https://ailink.gts.work/teams/${Application(Client) ID}/workbench

https://ailink.gts.work/thirdparty/teams/${Application(Client) ID}/login

https://ailink.gts.work/thirdparty/teams/${Application(Client) ID}/oauth2/callback

https://ailink.gts.work/teams/${Application(Client) ID}/person/inviteToGroup

3. Under Implicit grant and hybrid flows, select:

• Access tokens (used for implicit flows)

• ID tokens (used for implicit and hybrid flows)

4. Click Configure.

Step 3: Create Client Secret

1. In the left navigation, click Certificates & secrets.

2. Click + New client secret.

3. Enter the following:

• Description: Teams App Secret

• Expires: Select an appropriate period (24 months is recommended)

4. Click Add.

Step 4: Configure API Permissions

1. In the left navigation, click API permissions.

2. Click + Add a permission.

3. Select Microsoft Graph.

4. Select Delegated permissions.

5. Search for and select User.Read.

6. Click Add permissions.

7. (Optional) Click Grant admin consent for [Your Organization].

Step 5: Expose an API

1. In the left navigation, click Expose an API.

2. Set the Application ID URI:

• Click the Add button

• Enter: api://ailink.gts.work/${Application (Client) ID}

• Click Save

3. Add a scope:

• Click + Add a scope

• Fill in the following information:

Scope name: access_as_user

Who can consent: Admins and users

Admin consent display name: Teams can access the app's Web APIs

Admin consent description: Allows Teams to call the app's Web APIs as the current user

User consent display name: Teams can access the app's Web APIs and make requests on your behalf

User consent description: Allows Teams to call this app's Web APIs with the same permissions you have

7. State: Enabled

• Click Add scope

• Copy the Scope ID (GUID) and save it as Scope ID (GUID)

Step 6: Add Pre-authorized Client Applications

1. On the Expose an API page, click + Add a client application.

2. Add the following Client IDs one at a time:

3. For each client application:

• Enter the Client ID

• Check the access_as_user scope

• Click Add application

Step 1: Access Teams Developer Portal

1. Go to the Teams Developer Portal.

2. Sign in with your Microsoft 365 administrator account.

Step 2: Create New App

1. In the left navigation, click Apps.

2. Click + New app.

3. Enter the app name: Alibaba Cloud Enterprise Service (or your preferred name).

4. Click Create.

Step 3: Configure Basic Information

1. Go to Basic information in the app editor.

2. Enter the following:

• Short name: Alibaba Cloud Service

• Full name: Alibaba Cloud Enterprise Service

• Short description: Alibaba Cloud Service

• Full description: Alibaba Cloud Enterprise Service

• Developer name: Your Company Name

• Website: https://yourcompany.com(Your company website)

• Privacy policy: https://yourcompany.com/privacy(Your company website)

• Terms of use: https://yourcompany.com/terms(Your company website)

• Application (Client) ID: Paste your Application (Client) ID

3. Upload icons:

• Color icon: Upload color.png (192x192 pixels)

• Outline icon: Upload outline.png (32x32 pixels)

4. Set accent color: #60A18E (or your preferred color)

5. Click Save.

Step 4: Configure Personal Tab

1. Under Configure, click App features.

2. Click Personal apps.

3. Click + Add a personal tab.

4. Enter the following:

• Name: Alibaba Cloud Enterprise Service

• Entity ID: Default value

• Content URL: https://ailink.gts.work/teams/${Application(Client) ID}/workbench

• Website URL: Leave empty or same as Content URL

5. Click Confirm.

Step 5: Configure Single Sign-On (SSO)

1. Under Configure, click Single sign-on.

2. Enter the Application ID URI:

• This value must match the Application ID URI from Azure AD (Step 5 of section 3.1).

3. Click Save.

Step 6: Configure Domains

1. Under Configure, click Domains.

2. Click + Add domain.

3. Enter ailink.gts.work (without https://)

4. Click Add.