---
schema_version: "1"
id: e6638435c1e88dc941fd3fe2112f4ac63b665051ffa5d59959c907d57f6b34d6
title: Configure Salesforce and Microsoft Teams Automatically
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/service/264-0-0/it_srvcs_msteams_cnct_sf_and_teams.md
canonical_url: https://help.salesforce.com/s/articleView?id=service.it_srvcs_msteams_cnct_sf_and_teams.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: b53cb623d0160cb5a94938c78b9786b4cc284e31b211429b64b50f41aaa2bc60
description: Streamline the Salesforce and Microsoft Teams integration by automatically installing the authentication components. Create a Microsoft Entra ID application, configure the generated named credential, and obtain Azure administrator consent.
products:
  - Service Cloud
  - Agentforce IT Service
release: "264"
---
# Configure Salesforce and Microsoft Teams Automatically

Streamline the Salesforce and Microsoft Teams integration by automatically installing the authentication components. Create a Microsoft Entra ID application, configure the generated named credential, and obtain Azure administrator consent.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions with Agentforce IT Service.</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d93428e73">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d93428e73 ">To connect Salesforce and Microsoft Teams:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d93428e73 ">System Administrator Profile</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d93428e73 ">To configure named credentials</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d93428e73 ">MSTeamsSetupAutomationAccess</td>

          </tr>
        </tbody>
      </table>

Make sure your org has the Teams IT Services Add-on, Teams Employee Add-on, Incident Management Add-on, and Service Cloud Employee Hub HR Standard Add-on licenses provisioned.

## Enable Microsoft Teams for Employee Service

1. From Setup menu, go to **Salesforce Go** > **Feature Sets**.
2. On the Deliver IT Services Across Channels card, select **Set Up**.
3. On the Microsoft Teams for Employee Service card, select **Set Up**.
4. On the Microsoft Teams for Employee Service page, select **Get Started**.
5. Turn on Microsoft Teams for Employee Service.
    
    When you enable Microsoft Teams for Employee Service, the External Client App, Auth Provider, External Credentials, and Named Credentials install automatically.

## Create a Microsoft Entra ID App

Create a Microsoft Entra ID App in the Azure portal, and then configure its client ID and client secret in a named credential to prepare for automation.

1. Create a Microsoft Entra ID App in the Azure portal with Application.ReadWrite.All and Organization.ReadWrite.All permissions.
    1. Sign in to the [Azure portal](https://portal.azure.com).
    2. On the Welcome to Azure dashboard, under Manage Microsoft Entra ID, click **View**. You can also search for Microsoft Entra ID in the top search bar.
    3. From the left navigation menu, under the Manage section, select **App registrations**.
    4. Select **\+ New registration**.
    5. For Name field, enter a descriptive name, such as MS\_Teams\_Salesforce\_Integration\_App.
    6. Under Supported account types, select **Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant)**.
    7. Click **Register**.
    8. On the application overview page, click **Add a certificate or secret**.
    9. Select **\+ New client secret**.
    10. On the Add a client secret page, enter a description, and select an expiration duration.
    11. Click **Add**.
        
        Copy the client secret value and store it in a secure location. This value is hidden permanently after you leave this page. Use the value, not the secret ID.
    12. From the left navigation menu, select **API permissions**.
    13. Select **\+ Add a permission**.
    14. Select **Microsoft Graph**.
    15. Select **Application permissions**.
    16. Select these permissions for your integration.
        
        - Application.ReadWrite.All
        - Organization.ReadWrite.All
    17. Click **Add permissions**.
    18. To finalize the authorization, click **Grant admin consent for your org to finalize the authorization**.
2. Configure the MSTeamsSetupNc named credential with the Microsoft Entra ID app's client ID and client secret.
    1. From the Quick Find box, enter Named Credentials and select **Named Credentials**.
    2. Click the **External Credentials** tab.
    3. Select **MSTeamsSetupClientCredentialsEC** from the list.
    4. Select **Edit**.
    5. In the URL field, replace the {tenant\_id} placeholder with your actual Azure Tenant ID.
    6. Save your changes.
    7. Scroll down to the Principals section.
    8. For the NamedAuthPrincipal, from the action dropdown, select **Edit**.
    9. In the Edit Principal dialog box, enter the Azure Client ID and Client Secret from the Microsoft Entra ID app that you created earlier.
    10. Select **Save**.
    11. Verify that the Authentication Status for the principal is updated to Configured.
3. Grant Azure administrator consent for Microsoft Teams integration.
    1. From Setup, click **Salesforce Go**.
    2. Search for and select **Microsoft Teams for Employee Service**.
    3. Turn on Microsoft Teams for Employee Service. To apply the new automated SSO and swarming features if the feature is already turned on, turn the feature off and then turn it back on.
    4. Locate the Grant Azure Administrator Consent step and click **Grant Consent**. A window displays a unique authorization URL.
    5. Click **Copy Link** and share this URL with your Azure Tenant Administrator. If you are the Azure Administrator, open the link in a new browser tab to approve the application's request to access and read organizational data.