I want to make my chatbot only available to specific Microsoft accounts

Question

Hey dear community,

I create a chatbot with Azure Bot Services and so far everything works perfectly. I can chat with it on teams and in the webchat as intended. But so can everyone else theoreticially. I want to make this an internal app for my company that only people with an account from our company can chat with. I can turn on authentication but then i can´t chat with it anymore either. How do I have to configure things and make it only available to chosen people and accounts?

What are the steps I have to do? I am really confused and the documentation is not helpful.

Kind regards and thank you for your Support

Devin

Answer 1

Hi @Devin Yildirim this is possible kinldy go through the following steps

1. Register the Bot in Azure Active Directory (Azure AD):
   • Go to the Azure portal (https://portal.azure.com/) and navigate to Azure Active Directory.
     • Register your bot as a new application in Azure AD.
2. Configure Authentication in Azure Bot Services:
   • In the Azure Bot Services portal (https://ms.portal.azure.com/#home), select your bot and navigate to the "Settings" section.
     • Under "Settings," select "OAuth Connection Settings."
       • Add a new OAuth connection by providing the required information, including the Application ID and client secret/certificate obtained in step 1.
         • Test the connection to ensure it works properly.
3. Enable Authentication in Your Bot:
   • In your bot's code, enable authentication by using the OAuth connection you configured in step 2.
     • Depending on the bot framework you are using (e.g., Bot Builder SDK for Node.js or C#), refer to the documentation on how to enable authentication for your bot.
4. Test the Authentication:
   • Deploy your bot with the authentication settings and test it using an account from your company. You should be able to chat with the bot after authenticating.
5. Configure Channels and Permissions:
   • In the Azure Bot Services portal, configure the channels where your bot should be available (e.g., Teams, Web Chat).
     • Adjust the permissions and access settings for these channels to ensure that only authorized users from your company can access the bot through these channels.

by this way only people you allow can have access to bot, check documentations for more info

if this helps kindly accept answer, thanks much