Configure incoming webhooks for microsoft teams

Enable delivery of Security Cloud Control notifications to Microsoft Teams by creating an incoming webhook in Teams and configuring the service integration in Security Cloud Control.

Security Cloud Control can forward notifications to Microsoft Teams. These messages are displayed either in a designated channel or as an automated bot in a private chat message in Microsoft Teams. To enable this functionality, you must generate a webhook URL from Microsoft Teams and point Security Cloud Control to that webhook. For more information about adding incoming webhooks to a Microsoft Teams channel, see Create incoming webhooks with Workflows for Microsoft Teams.

Before you begin

These are the prerequisites to allow Security Cloud Control notifications in Microsoft Teams:

  • A Microsoft Teams account.

  • A Security Cloud Control account and tenant.

Follow these steps to generate a webhook URL in Microsoft Teams and enable notifications from Security Cloud Control:

Procedure

Step 1

Log in to your Microsoft Teams account.

Step 2

In the New Teams client, click Teams and navigate to the channel in which you want to add an incoming webhook.

Step 3

Click More options ••• next to the channel name.

Step 4

Click Workflows.

Step 5

Click Post to a channel when a webhook request is received.

Step 6

Provide a name for the webhook and click Next.

Step 7

Choose the channel where notifications must be posted.

If you use this workflow from a Microsoft Teams chat or channel, these fields get populated automatically.

Step 8

After you enter the required details, click Add workflow.

Step 9

Copy the unique webhook URL from the dialog box that is displayed. The URL maps to the channel. You can use it to send information to Teams.

Step 10

Log into Security Cloud Control.

Step 11

In the left pane, click Administration > Notification Settings.

Step 12

Scroll to Service Integrations.

Step 13

Click the blue plus button.

Step 14

Enter a Name.

This name is displayed in Security Cloud Control as a configured service integration. However, it does not appear in any of the events forwarded to the configured service.

Step 15

Expand the drop-down list, and select Microsoft Teams as the Service Type.

Step 16

Paste the webhook URL generated from Microsoft Teams into URL.

Step 17

Under Send Alerts When, examine and confirm that the selected notifications are correct. If not, modify the notification selection before proceeding.

Step 18

Click Save.

Notifications from Security Cloud Control are delivered to the selected Microsoft Teams channel or chat through the configured webhook according to your alert selections.