Microsoft Teams

This section describes how to deploy your AI Agent in a Microsoft Teams Team or in Microsoft Teams at organizational level.

Deploy an AI Agent in a Microsoft Teams Team

This section describes how to deploy AI Agents in a team with MS Teams using the Developer Portal. For information on other options you’ve got for MS Teams integration, see Microsoft documentation.

Prerequisites

Before configuring the MS Teams channel, ensure you have:

• A published AI Agent.
• A MS Teams account.

• Microsoft Bot Framework enabled on your tenant (for Druid hybrid and cloud deployments).

Deploy your AI Agent in MS Teams

Step 1. Active MS Teams channel in Druid

1. Log in to the Druid Portal and select your AI Agent.
2. Click the Channels tab.
3. Search for 'teams' and click the MS Teams card.



4. The channel configuration modal appears.
5. Select the Microsoft Teams option that suits your company's Microsoft Office 365 version, agree to the Microsoft terms and statements and click Publish.



The channel activation might take up to 1 minute.

When the channel activation completes, the Microsoft Application Id field is automatically filled in. This is the MS Azure ID associated to your AI Agent.

6. Copy the Microsoft Application Id as you will need the value at the next step.

After the channel activates, Druid automatically provisions the following [[ChatUser]] parameters in the conversation context:

• [[ChatUser]].ChannelId = "msteams"
• [[ChatUser]].UserId - Stores an unique identifier of the MS Teams user account.
• [[ChatUser].Email
• [[ChatUser].FirstName
• [[ChatUser].Lastname
• [[ChatUser].DomainUserName

Step 2. Create a bot using Developer Portal and download the app package

1. In the Teams client, open the Developer Portal. From the ... overflow menu on the left, click Developer Portal.



The Teams Developer Portal opens.



If Developer Portal isn't already installed, install it:

1. Search for Developer Portal.
2. Click on Developer Portal.



The app is now available when clicking … on the left menu.

2. Click the Apps tab, then click New App.



3. Type a name for your app and click Create.



4. On the Configure menu, click Basic Information.
5. Provide your app details.





In the Microsoft Partner ID field, enter the DRUID MPN (the one generated in Druid after the channel activation).

6. Click Save.
7. On the Configure menu, click Permissions and under Device Permissions, select Send the user notifications.



8. Click Save.
9. From the Configure menu, click App features and on the right pane, click Bot.
10. Tap on Enter a Bot ID and in the field below enter the Microsoft Application ID associated to your AI Agent (the one generated in Druid after the channel activation).
Info: Copy and Paste the Microsoft Application Id from the Teams channel configuration from the Druid Portal.



11. Select the capabilities and scopes your AI Agent will need: Upload and download files, scopes Personal and Team.



12. Scroll down and click Save.
13. If you want your AI Agent to benefit the sensitive data manipulation:
1. On the Configure menu, click Domains.
2. Add the following domains:
• token.botframework.com
• Druid API domain that is specific to the Druid Cloud you're using:

DRUID Community	PROD Europe	PROD US	PROD Australia
druidapi.comm.eu.druidplatform.com	prod-DRUID-api.azurewebsites.net	druidapi.us.druidplatform.com	druidapi.au.druidplatform.com

14. At the top right corner of the page, click the Distribute button. A pop-up appears.
15. Click Download the app package.

The app package is successfully downloaded in your default download folder.

Step 3. Validate your app

To validate your app, follow these steps:

1. From the Publish menu, click App validation.
2. In the App Validation page, click Get Started.



3. Acknowledge the three steps on the screen and click Start validation.

When the app validation completes successfully, you can publish the app to your org, publish to the Teams store or install it in MS Teams.

Step 4. Install the AI Agent in a team in MS Teams

To integrate the AI Agent in a MS team, in MS teams, from the left menu, click Teams. Right click on a team that you created and select Manage team.

The Team page appears by default on the Members tab.

Click the Apps tab, then click Upload an app.

Browse for the app package you downloaded at Step 2, select it and click Open. If the Microsoft manifest passed, the AI Agent installation starts in the selected team.

Deploy an AI Agent in Teams at the organization level

Step 1. Prepare the App Package

Follow the Druid documentation (Step 2. Create a bot using Developer Portal and download the app package described in the previous procedure) to create the bot in the Teams Developer Portal and download the App Package (.zip file) as you normally would.

Step 2. Upload to the Organization Catalog

An MS Teams Administrator must perform these steps:

1. Go to the Microsoft Teams Admin Center.

2. In the left navigation, go to Teams apps > Manage apps.

3. Click the Upload new app button (or "Publish to your organization's app store").

4. Select the .zip file you downloaded from the Developer Portal.

5. Once uploaded, the AI Agent status will show as Published.

Step 3. Automatic Deployment (Setup Policies)

If you want the AI Agent to automatically appear in the left-hand sidebar for every employee (so they don't have to search for it):

1. In the Teams Admin Center, go to Teams apps > Setup policies.
2. Click on the Global (Org-wide default) policy (or create a new one for specific groups).
3. Under Installed apps, click Add apps and search for your Druid AI Agent. This installs it for everyone covered by the policy.
4. (Optional) Under Pinned apps, click Add apps to pin the Druid AI Agent to the Teams sidebar for all users.
5. Click Save.

Key Differences to Remember

• Scope: In the Developer Portal, ensure the Scopes in your manifest include Personal (for 1:1 chat with all employees) and Team (if you still want people to be able to add it to specific channels).

• Permissions: Deploying at the organization level often requires Global Admin consent for any Graph API permissions the AI Agent might use (like reading user profiles).

• Propagation Time: Organization-wide setup policies can take up to 24 hours to reflect on every user's Teams client.

Implement Role-Based Access Control via Microsoft Entra ID Groups

By default, Druid retrieves the user's name, surname, and email from Microsoft Teams. Starting with Druid 9.19, you can also retrieve the security groups the user belongs to. This allows you to create specialized flows based on user roles—for example, granting "Operational" users access to internal invoicing tools while keeping other users in an "Informational" only loop.

Step 1. Create an App in Microsoft Entra ID

To enable group retrieval, you must register a separate application in the Microsoft Entra admin center (formerly Azure Active Directory) to grant Druid permission to read directory data.

1. Register a new application following Microsoft documentation.
2. Ensure the application has the API Permission: GroupMember.Read.All (Application permission).
3. Generate a Client Secret for this application.
4. Copy the Client ID, Client Secret, and Tenant ID.

Step 2. Configure the MS Teams Channel in Druid

Navigate to your MS Teams channel configuration in the Druid Portal and provide the details from the Entra ID app:

• Directory access Client Id
• Directory access Client Secret
• Directory access Tenant Id

Step 3. How Group Data is Stored

Once configured and the channel is active, the groups associated with the user are automatically stored in the conversation context. The data is saved in a JArray format within the following system parameter: [[ChatUser]].SSOGroups.

Example data stored in this parameter: ["HR", "Financial", "Managers", "Invoicing_Team"]

You can use this parameter, [[ChatUser]].SSOGroups within your flows to branch logic. For instance, an AI Agent can check if [[ChatUser]].SSOGroups contains "Financial" before allowing a user to download invoices.

Limitations

MS Teams has a limited pagination for hero cards and buttons with repeater, as follows:

• For hero buttons with repeater, a bulk of 6 will be shown per page.
• For hero cards with repeater, a bulk of 9 will be shown per page.

Inactivating the channel

To inactivate the channel, go to the Channels page and turn off the Enabled toggle on the MS Teams card.