Incoming Webhooks for Microsoft Teams

Security Cloud Control can forward notifications to Microsoft Teams. These messages are displayed either in a designated channel or as an automated bot in a private chat message in Microsoft Teams. To enable this functionality, you must generate a webhook URL from Microsoft Teams and point Security Cloud Control to that webhook. For more information about adding incoming webhooks to a Microsoft Teams channel, see Create incoming webhooks with Workflows for Microsoft Teams.

Prerequisites

These are the prerequisites to allow Security Cloud Control notifications in Microsoft Teams:

A Microsoft Teams account.
A Security Cloud Control account and tenant.

Use this procedure to generate a webhook URL in Microsoft Teams and enable notifications from Security Cloud Control:

Procedure

Step 1	Log in to your Microsoft Teams account.
Step 2	In the New Teams client, click Teams and navigate to the channel in which you want to add an incoming webhook.
Step 3	Click More options ••• next to the channel name.
Step 4	Click Workflows.
Step 5	Click Post to a channel when a webhook request is received.
Step 6	Provide a name for the webhook and click Next.
Step 7	Choose the channel where notifications must be posted. If you use this workflow from a Microsoft Teams chat or channel, these fields get populated automatically.
Step 8	After you enter the required details, click Add workflow.
Step 9	Copy the unique webhook URL from the dialog box that is displayed. The URL maps to the channel. You can use it to send information to Teams.
Step 10	Log into Security Cloud Control.
Step 11	In the left pane, click Administration > Notification Settings.
Step 12	Scroll to Service Integrations.
Step 13	Click the blue plus button.
Step 14	Enter a Name. This name is displayed in Security Cloud Control as a configured service integration. However, it does not appear in any of the events forwarded to the configured service.
Step 15	Expand the drop-down list, and select Microsoft Teams as the Service Type.
Step 16	Paste the webhook URL generated from Microsoft Teams into URL.
Step 17	Under Send Alerts When, examine and confirm that the selected notifications are correct. If not, modify the notification selection before proceeding.
Step 18	Click Save.