Cant interact with anonymous users using adaptive cards

Question

Hey!

I'm trying to interact with anonymous users via adaptive cards in chats using my bot app, but so far without success.

Here’s what I’ve tried:

openUrl with a deep link to a dialog → Works for regular users, fails for anonymous users

submit action to invoke a task module → Works for regular users, fails for anonymous users

fetch task to open a dialog → Also does not work for anonymous users

I have tried to open both regular url (with my ngrok in the manifest) and dialogs (both web and adaptive card dialogs).

Its worth mention that I didnt change the code, and in the short past the Dialog of the adaptive card worked for me and I think I remember that in that far past the html dialog worked aswell for my bot app for anonymous users (But I'm not sure about it).

Thats what I see for now, no matter which of the interactions that I mentioned:

Our app hasn't been published to the Teams Marketplace yet, and I'm not sure if that’s related. When I check the browser’s dev tools (F12) as an anonymous user, I see multiple errors saying it can’t retrieve data about the app—which might be relevant.

Here’s the part of the manifest I think could be related:

"validDomains": [
    "*.ngrok-free.app",
    "*.microsoft.com",
    "token.botframework.com",
    "oauth.botframework.com",
    "*.botframework.com"
  ],
  "webApplicationInfo": {
    "id": "8018db63-5495-4ae7-9f95-8f4e8fe1414e",
    "resource": "api://flexible-fairly-fly.ngrok-free.app/botid-8018db63-5495-4ae7-9f95-8f4e8fe1414e"
  },
  "authorization": {
    "permissions": {
      "resourceSpecific": [
        {
          "name": "OnlineMeetingNotification.Send.Chat",
          "type": "Application"
        },
        {
          "name": "TeamsActivity.Send.User",
          "type": "Application"
        }
      ]
    }
  },
  "meetingExtensionDefinition": {
    "supportsAnonymousGuestUsers": true
  },
  "activities": {
    "activityTypes": [
      {
        "type": "meetingNotification",
        "description": "Meeting Notification Activity",
        "templateText": "{actor} sent a meeting notification"
      },
      {
        "type": "targetedNotification", 
        "description": "Targeted Meeting Notification",
        "templateText": "{actor} sent a targeted notification to selected members"
      }
    ]
  }

This is the example of things I have tried:

 const card = {
      type: "AdaptiveCard",
      body: [
        {
          type: "TextBlock",
          text: "🌐 Personal Access Link Generator",
          weight: "bolder",
          size: "large",
          horizontalAlignment: "center"
        },
        {
          type: "TextBlock",
          text: "Click the link below to get your unique tracking URL:",
          wrap: true,
          horizontalAlignment: "center",
          spacing: "medium"
        },
        {
          type: "TextBlock",
          text: `🔗 **[Generate Personal Link first option](${personalizedUrl})**`,
          wrap: true,
          horizontalAlignment: "center",
          spacing: "medium"
        }
      ],
      actions: [
        {
          type: "Action.Submit",
          title: "Generate Personal Link second option",
          data: {
            action: "generatePersonalLink",
            conversationId: conversationId,
            timestamp: timestamp,
            source: "teams-bot-card",
            requestType: "task-submit"
          }
        },
        {
          type: "Action.OpenUrl",
          title: "🚀 Open URL - Option 3",
          url: personalizedUrl
        }
      ],
      $schema: "http://adaptivecards.io/schemas/adaptive-card.json",
      version: "1.2"
    };

Answer 1

Hi @Shahar Sonsino

Thank you for posting your question in the Microsoft Q&A forum!

I understand your primary goal is to create a seamless experience where anonymous participants can interact directly with your bot's features using an Adaptive Card.  

The reason your troubleshooting steps are encountering this roadblock is due to a core security policy in Microsoft Teams regarding anonymous users. To protect tenant security, the platform intentionally blocks any action from an anonymous user that needs to communicate back to the bot. As a moderator, I have some limitations in our ability to create a custom lab environment to test each specific troubleshooting scenario. However, based on my experience with this exact issue, I have found an official Microsoft Learn document that covers how to build the fundamental components for Teams apps, including bots, messaging extensions, cards, and dialogs. Our next step is to implement a backend service to store and manage attributes for anonymous users, using their temporary meeting ID as the key.  

Build apps for anonymous user - Teams | Microsoft Learn

Teams settings and policies reference - Microsoft Teams | Microsoft Learn

I just wanted to double-check the app manifest schema version. For our purposes, we need it to be v1.16 or later. My understanding from the YAML snippet is that the version: 1.2 specified is for the Adaptive Card itself, rather than the app manifest's schema. Could you please confirm which manifest schema version the app is using? As a moderator, I don't have access to the same tools or resources as a developer, so my assessment is based solely on the information you have provided. If I have misinterpreted any details, please feel free to correct me

Please correct me if I'm wrong. We hope you find this information helpful. If the issue persists, please feel free to provide us with any additional details. Thank you for understanding. 

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".  

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hey! I still need help on that manner :)