Skip to main content
Version: Latest

Microsoft Teams connector

The Teams connector exposes the Microsoft Graph Teams API as a set of MCP tools (read chat messages, send messages to channels, list channels and teams) through the PolicyArc gateway. Every tool call carries the caller's own Microsoft OAuth token, so Teams' per-user permissions apply naturally.

Prerequisite

You must have the Microsoft Entra ID identity provider connected first. The connector reuses the same Entra app registration — make sure it has the Microsoft Graph delegated permissions:

  • Chat.Read, Chat.ReadWrite
  • ChannelMessage.Read.All, ChannelMessage.Send
  • Channel.ReadBasic.All
  • Team.ReadBasic.All

These are documented in Step 7 of the Microsoft IDP setup.

Step 1 — Open the Add Connector screen​

Open Resources → Add connector (or click Pick a connector from the environment dashboard).

In the Unlocked by your identity providers section, the Microsoft Teams template will show a green border once the Microsoft IDP is connected.

Connector list — Teams ready

Click Microsoft Teams.

Step 2 — Connect​

The Teams setup form has a single field — the Authentication mode, pre-filled with idp_passthrough. That forwards each caller's own Microsoft OAuth token to Graph. Click Connect.

Teams setup screen

Step 3 — Confirm the connector​

After connecting, you'll see the connector's status screen with the available Teams tools. The connector is policy-governed from the first request.

You can return to this view any time from the Resources menu by clicking View on the Microsoft Teams entry.

What's next​

The Teams tools are now on your gateway. Pick an MCP client to wire up: