Confusion about the Teams Bot SSO workflow.

[yuezk]

Hi, I have a few questions:

1. I'm confused about step 4, which shows that the action starts from the Teams Client and ends at Azure AD. In contrast, the explanation shows that both the Bot Service and Bot Framework Token Service participate in the workflow. It looks doesn't match the diagram.
2. How does the Bot Service continue to process the initial request after authentication? I assume that the initial message should have been lost after the authentication. The diagram does not provide enough information about it.
3. I'm really confused about the Bot Framework Token Service, it appears many times on the doc site. Is it an Azure AD resource I can create on the Azure AD portal or a service the Bot developer needs to implement?

Thanks.

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: 34429d15-0e10-655c-fa2c-c434a8a460a6
• Version Independent ID: 34429d15-0e10-655c-fa2c-c434a8a460a6
• Content: Overview to authentication using SSO in Teams with Azure AD - Teams
• Content Source: msteams-platform/bots/how-to/authentication/bot-sso-overview.md
• Service: msteams
• GitHub Login: @surbhigupta
• Microsoft Alias: surbhigupta

[sayali-MSFT]

@yuezk - Thanks for reporting your issue. We will check with the engineering team and let you know the update once we have any.

Please have look into this document for more information about Bot Framework Token Service https://learn.microsoft.com/en-us/azure/bot-service/bot-builder-concept-authentication?view=azure-bot-service-4.0#about-the-bot-framework-token-service

[ChetanSharma-msft]

Hello, Sorry for delay in response. We are checking this with engineering team and update the documentation, if required.