Configure Salesforce and Microsoft Teams Automatically

Enable Microsoft Teams for Employee Service

1. From Setup menu, go to Salesforce Go > Feature Sets.
2. On the Deliver IT Services Across Channels card, select Set Up.
3. On the Microsoft Teams for Employee Service card, select Set Up.
4. On the Microsoft Teams for Employee Service page, select Get Started.
5. Turn on Microsoft Teams for Employee Service.
   When you enable Microsoft Teams for Employee Service, the External Client App, Auth Provider, External Credentials, and Named Credentials install automatically.

Create a Microsoft Entra ID App

Create a Microsoft Entra ID App in the Azure portal, and then configure its client ID and client secret in a named credential to prepare for automation.

1. Create a Microsoft Entra ID App in the Azure portal with Application.ReadWrite.All and Organization.ReadWrite.All permissions.
   1. Sign in to the Azure portal.
   2. On the Welcome to Azure dashboard, under Manage Microsoft Entra ID, click View. You can also search for Microsoft Entra ID in the top search bar.
   3. From the left navigation menu, under the Manage section, select App registrations.
   4. Select + New registration.
   5. For Name field, enter a descriptive name, such as MS_Teams_Salesforce_Integration_App.
   6. Under Supported account types, select Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant).
   7. Click Register.
   8. On the application overview page, click Add a certificate or secret.
   9. Select + New client secret.
   10. On the Add a client secret page, enter a description, and select an expiration duration.
   11. Click Add.
       Copy the client secret value and store it in a secure location. This value is hidden permanently after you leave this page. Use the value, not the secret ID.
   12. From the left navigation menu, select API permissions.
   13. Select + Add a permission.
   14. Select Microsoft Graph.
   15. Select Application permissions.
   16. Select these permissions for your integration.
       • Application.ReadWrite.All
       • Organization.ReadWrite.All
   17. Click Add permissions.
   18. To finalize the authorization, click Grant admin consent for your org to finalize the authorization.
2. Configure the MSTeamsSetupNc named credential with the Microsoft Entra ID app's client ID and client secret.
   1. From the Quick Find box, enter Named Credentials and select Named Credentials.
   2. Click the External Credentials tab.
   3. Select MSTeamsSetupClientCredentialsEC from the list.
   4. Select Edit.
   5. In the URL field, replace the {tenant_id} placeholder with your actual Azure Tenant ID.
   6. Save your changes.
   7. Scroll down to the Principals section.
   8. For the NamedAuthPrincipal, from the action dropdown, select Edit.
   9. In the Edit Principal dialog box, enter the Azure Client ID and Client Secret from the Microsoft Entra ID app that you created earlier.
   10. Select Save.
   11. Verify that the Authentication Status for the principal is updated to Configured.
3. Grant Azure administrator consent for Microsoft Teams integration.
   1. From Setup, click Salesforce Go.
   2. Search for and select Microsoft Teams for Employee Service.
   3. Turn on Microsoft Teams for Employee Service. To apply the new automated SSO and swarming features if the feature is already turned on, turn the feature off and then turn it back on.
   4. Locate the Grant Azure Administrator Consent step and click Grant Consent. A window displays a unique authorization URL.
   5. Click Copy Link and share this URL with your Azure Tenant Administrator. If you are the Azure Administrator, open the link in a new browser tab to approve the application's request to access and read organizational data.