docudio / Inquiryz

We are human, can't remember everything. Let Inquiryz Inquire on the things you care about.
0 stars 0 forks source link

Core Teams Functionaly #2

Open TheSecMaven opened 3 years ago

TheSecMaven commented 3 years ago

Thread to discuss the integration with MS teams to schedule messages being sent out.

TheSecMaven commented 3 years ago

this piece of the integration would be good for business in general. not just IT people

TheSecMaven commented 3 years ago

got an app setup that requests the permissions it needs to do what we want, but need to get verified before because otherwise microsoft could classify the app as risky, since its asking for powerful permissions to send messages https://docs.microsoft.com/en-us/azure/active-directory/develop/publisher-verification-overview

Sample URL https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=94b42b20-7fc1-4897-b0e7-d5119dce8d4c&response_type=code&redirect_uri=https%3A%2F%2Flocalhost%3A3000&response_mode=query&code_challenge=7AH8eO4H_KHKfESq57VIGji19U2aHfMuPOtcFGfmhq8&code_challenge_method=S256&scope=https%3A%2F%2Fgraph.microsoft.com%2FUser.Read%20https%3A%2F%2Fgraph.microsoft.com%2FChatMessage.Send

ONLY for nonproduction use.

TheSecMaven commented 3 years ago

so basically on pause needing to get a custom email domain so we can take next steps to the verification process.

TheSecMaven commented 3 years ago

we may need all these permissions at one point https%3A%2F%2Fgraph.microsoft.com%2FChannelMessage.Read.All%20https%3A%2F%2Fgraph.microsoft.com%2FChannelMessage.Send%20https%3A%2F%2Fgraph.microsoft.com%2FChat.Read%20https%3A%2F%2Fgraph.microsoft.com%2FChatMessage.Send%20https%3A%2F%2Fgraph.microsoft.com%2FGroup.ReadWrite.All%20https%3A%2F%2Fgraph.microsoft.com%2FUser.Read%20