Microsoft Teams via Webhook

Integration for sending notifications to a Microsoft Teams channel via a workflow of type `Post to a channel when a webhook request is received`.

Messaging and Conferencing · Microsoft Teams

Details

IDMicrosoft Teams via Webhook
ProviderMicrosoft
CategoryMessaging and Conferencing
From Version6.2.0
Docker Imagedemisto/python3:3.12.13.10116658
Supported ModulesAgentix Cortex Cloud Cloud Runtime Security Cloud Posture Security XSIAM EDR

README

Integration for sending notifications to a Microsoft Teams channel via workflow.
This integration was integrated and tested with version 6.8 of Microsoft Teams via Webhook

Configure Microsoft Teams via Webhook in Cortex

Parameter Description Required
Microsoft workflow URL The workflow URL in the Teams Channel True
Trust any certificate (not secure)   False
Use system proxy settings   False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

ms-teams-message


Send a message to Microsoft Teams via Incoming Webhook.

Base Command

ms-teams-message

Input

Argument Name Description Required
message The message to send. For example: “This is a message from Cortex XSOAR”. To use a newline use \n\n or \r\r. Default is None. Optional
team_webhook The alternative webhook for a different team. If not defined, the integration’s default webhook is used. Optional
alternative_url The alternative URL to send in place of the link to the Cortex XSOAR Investigation. Optional
url_title The title for the link. Default is Cortex XSOAR URL. Optional
adaptive_cards_format Should the adaptive card format be used or a single text message. Possible values are: true, false. Default is True. Optional
overwrite_adaptive_card_json JSON object used to overwrite the default adaptive card JSON. Optional

Context Output

There is no context output for this command.

Troubleshooting

By default the message is being sent with a message template: X Used a Workflow template to send this card.
In order to eliminate this line you can use the following approach:

  1. Navigate to Microsoft’s Power Automate portal and sign into your Microsoft Teams account where you’ve previously set up the Flow.
  2. Click My flows from the left side menu.
  3. Click the newly created Flow to open its details page.
  4. On the Flow’s details page, click Save As.
  5. Give your new Flow a name and click **Save””.
  6. Navigate back to My flows from the left side menu.
  7. Find the copy Flow and click its name to access its details page.
  8. On the Flow’s details page, click Turn On.
  9. In order to find the new URL link, navigate to the Edit tab on the Flow’s details page.
  10. Click the action task and copy the HTTP URL.
  11. Configure an instance of the integration and add the copied Workflow URL for the Teams channel.

Configuration parameters

  • webhookurl — Microsoft workflow URL (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (1)

  • ms-teams-message

    Send a message to Microsoft Teams via Incoming Webhook.

category: Messaging and Conferencing
provider: Microsoft
sectionorder:
- Connect
- Collect
commonfields:
  id: Microsoft Teams via Webhook
  version: -1
configuration:
- additionalinfo: The webhook URL in the Teams channel.
  display: Microsoft workflow URL
  name: webhookurl
  required: true
  type: 0
  section: Connect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  section: Connect
  advanced: true
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  section: Connect
  advanced: true
  required: false
description: Integration for sending notifications to a Microsoft Teams channel via a workflow of type `Post to a channel when a webhook request is received`.
display: Microsoft Teams via Webhook
name: Microsoft Teams via Webhook
script:
  commands:
  - arguments:
    - defaultValue: None
      description: 'The message to send. For example: "This is a message from Cortex XSOAR". To use a newline use \n\n or \r\r.'
      name: message
    - description: The alternative webhook for a different team.  If not defined, the integration's default webhook is used.
      name: team_webhook
    - description: The alternative URL to send in place of the link to the Cortex XSOAR Investigation.
      name: alternative_url
    - defaultValue: Cortex XSOAR URL
      description: The title for the link, defaults to "Cortex XSOAR URL".
      name: url_title
    - description: Should the adaptive card format be used or a single text message.
      name: adaptive_cards_format
      auto: PREDEFINED
      predefined:
      - 'true'
      - 'false'
      defaultValue: true
    - description: JSON object used to overwrite the default adaptive card JSON.
      name: overwrite_adaptive_card_json
    description: Send a message to Microsoft Teams via Incoming Webhook.
    name: ms-teams-message
  dockerimage: demisto/python3:3.12.13.10116658
  runonce: false
  script: ''
  subtype: python3
  type: python
fromversion: 6.2.0
tests:
- No tests (auto formatted)