Microsoft Teams - Send Message

Microsoft Teams - Send Message posts a message to a Microsoft Teams channel for assets that match the results of the selected saved query, and match the Enforcement Action Conditions, if defined, or assets selected on the relevant Asset page.

General Settings

Required Fields

These fields must be configured to run the Enforcement Set.

• Webhook URL - The incoming Webhook URL that Microsoft Teams generates for sending messages to a channel. See Generating the Microsoft Teams Incoming Webhook URL below on how to generate and add an incoming Webhook URL to a Microsoft Teams channel.

Additional Fields

• Title - A title for the message. If you do not give a title, the title will be Send Microsoft Teams Message + 'for Query:' + [query name].

• Message Body - The body of the Microsoft Teams message. If you do not supply a body, this field remains empty.

• Create list of predefined responses - This field is only available in an action that is added to a Workflow. Enter a list of response buttons to be shown in the Microsoft Teams message in the order that they are added into this field. Click Add to add each possible response to the list. When a response button is clicked in a Microsoft Teams message that is sent, the workflow continues based on that button.

• Additional Fields - List additional fields that you want to include in the Microsoft Teams message.

• Send message even if no data is returned in the query (bool, default: TRUE) - When selected, a message is generated if the query returns zero assets (including cases where 'only run on added devices' is selected and no assets were added).

• Send the result in the message body - The result of the query is sent as a link by default. Select this option to send the result in the body of the message.

• Send the query summary in the message body - When selected, a summary of the query is added to the message.

• Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

• HTTPS proxy - Connect the value supplied in Webhook URL to a proxy instead of directly connecting it to the value supplied in Webhook URL.

Generating the Microsoft Teams Incoming Webhook URL

To add an incoming webhook to a Microsoft Teams channel and acquire the correct webhook URL

1. Sign into teams.microsoft.com with a user that has permissions to the channel you want to use for notifications. You add the incoming webhook to this channel.
2. In Teams, select Settings > Member permissions > Allow members to create, update, and remove connectors, so that you can add, modify, or delete a connector.
3. Open the channel, click the 3-dot menu in the upper-right corner, and select Connectors.
4. In the Connectors dialog that opens, type incoming webhook in the Search bar.
5. Near Incoming Webhook, click Add, and in the screen that opens, click Add again to install the app.
6. Near Incoming Webhook, click Configure, and name your webhook with a name, in our case, Axonius. Optionally, click Upload Image to upload a different image.
7. Click Create.
8. Your Incoming Webhook named Axonius has been created and it has been integrated with the Microsoft Teams channel you have chosen. The webhook URL is displayed in the box.
9. Paste the URL into the Webhook URL field in this EC action. This is the endpoint URL that you require to send data to Microsoft Teams.
10. Click Done. The webhook is now available in the Microsoft Teams channel.