question

HermanEdwards-0599 avatar image
0 Votes"
HermanEdwards-0599 asked HunaidHanfee-MSFT answered

Microsoft Teams Bot: Can a messaging endpoint include basic authorization (i.e. username:password)?

What I want:

  • Seeing that there is no way to pass extra headers to the messaging endpoint, I add basic authentication in the messaging endpoint url itself (e.g. "https://myusername:mypassword@mysite.com/api/messages")

  • The basic auth "myusername:mypassword" will help identify the user that's interacting with the MS Teams bot.


What's happening:

  • The basic auth part "myusername:mypassword" of the above url gets removed, when it sends API request to the messaging endpoint.


Related links


Any help is much appreciated.


office-teams-app-devazure-bot-service
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

HunaidHanfee-MSFT avatar image
0 Votes"
HunaidHanfee-MSFT answered

It is not possible to add authorization as myusername:mypassword@mysite.com to messaging endpoint.

Please have a look to following documents to understand more on security concerns:

  1. Bot Authentication

  2. Azure security baseline for Azure Bot Service.

  3. Azure Bot Service encryption for data at rest

Thanks
Hunaid L Hanfee



If the response is helpful, please click "Accept Answer" and upvote it. You can share your feedback via Microsoft Teams Developer Feedback link. Click here to escalate.




5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.