AI Chat Onboarding Information

Who will be involved in the technical onboarding?

  1. Provide the Microsoft 365/Azure Tenant Id to allow the Teams app to route chats.

  2. Azure Admin consents to the use of Graph API permission needed to enable Azure AD/Entra login for the web application. See Detailed Documentation >>

  3. Teams Admin approves the Teams app for the organization. See Detailed Documentation >>

  4. Teams Admin pushes the app org-wide or to specific user groups. See Detailed Documentation >>

Technical steps and process to onboard our AI chat service including integration with Microsoft Teams

  • Azure AD/Entra Admin - Approve the use of Graph API permissions for the web application.

  • Teams Admin - Approve the Teams app for the organization, configure user group permissions, and optionally configure any theming or branding options.

  • If you are a Project Lead or coordinator, you may want to review this page covering the POC Roadmap before going further into this page.

Required Steps

Step 1: Provide the Microsoft 365/Azure Tenant Id to allow the Teams app to route chats

During the setup process, Instant will need the Tenant Id for your organization. Typically, we will get this from you in the initial set of questions for setting up a POC. The Tenant Id is required to stand up the app in order to route chats to your agents. Here is some Microsoft documentation on how to Find your Microsoft 365 tenant ID - Microsoft resource

The Tenant Id will also be used to configure Azure AD/Entra authentication for your tenant.

Step 2: Azure Admin consents to the use of Graph API permission needed to enable Azure AD/Entra login for the web application

The next step involves configuring Azure AD/Entra authentication, which enables you to use your Office 365 account for authentication. This configuration is important for the Azure AD App registration, which has specific permissions:

[ email - Delegated ] [ openid - Delegated ] [ profile - Delegated ] [ User.Read - Delegated ]

For more detailed documentation, we have a comprehensive article covering the requested permissions. This article covers the list of API permissions you will need and details of what each of them do and are used for. See Detailed Documentation >>

O365 cross tenant authorization to enable chatbot service

Once the setup of your Tenant is complete, your Azure Admin will need to go to the login page and will be prompted to consent on behalf of your organization. Once that is completed, the tenant will be updated to use Office 365 authentication.

Step 3: Teams Admin approves the Teams app for the organization

Once you have gone through the configuration process, a Teams Admin can make the app available for the group you want to test with. Depending on how your organization is set up, there are some settings in the Teams Admin Center that would need to updated.

Here is a general guide the Teams Admin could use to locate the settings for allowing the download of the app, for a more detailed walkthrough of this please follow this guide:

Teams Admin: How to approve the app and allow it to be installed by users in your organization

Planning on running a POC - here are some commons tasks with branding and deployment:

Here is some additional documentation from Microsoft on managing Apps and App permissions for a Teams Admin:

Overview of app management and governance in Teams admin center - Microsoft resource

Step 4: Teams Admin pushes the application org-wide

At this stage, you’ll want to determine whether the app should be included in the Global (Org-wide default) permission group. Before rolling it out across the entire tenant, here are a few key factors to consider regarding the end user experience:

Follow this guide for instructions on How to have a Teams Admin push theapp org-wide