Share via

Authorization denied error for multi-tenant bot – clarification on deprecation and cross-tenant support

Akshay Babar 20 Reputation points
2026-03-02T20:02:57.16+00:00

Hello Team,

We have created a new multi-tenant Microsoft Teams bot application in last week. and deployed it successfully on Microsoft Azure.

Current issue:

When we send a message from our backend server to the bot, and the bot tries to send the message to a Teams channel, we receive the following error:

"Authorization has been denied for this request."

We are able to successfully obtain the access token, but the message sending fails with this authorization error.

Question 1:

From online articles and discussions, we understand that multi-tenant bot creation has been deprecated after July 31, 2025.

However:

  • We created some multi-tenant bot in September 2025.

At that time, it was working correctly.

It has now started failing with the authorization error.

Could you please confirm:

  1. Is this failure related to the deprecation of multi-tenant bots?
  2. If this is because of deprecation, then how was it working when we created the existing bot in September 2025?

Question 2:

If the issue is due to multi-tenant deprecation and we need to switch to a single-tenant model:

How can we support users from other tenants?

Is it possible to distribute a custom Teams app package directly to specific tenants (without publishing to the Teams App Store)?

In a single-tenant bot setup, what is the recommended approach to support cross-tenant customers while maintaining proper service-to-service authentication?

We would appreciate clarification on the recommended architecture going forward.

Thank you.

Azure AI Bot Service
Azure AI Bot Service

An Azure service that provides an integrated environment for bot development.

{count} votes

1 answer

Sort by: Most helpful
  1. kagiyama yutaka 1,245 Reputation points
    2026-03-06T12:59:03.5833333+00:00

    I think that… single‑tenant won’t break ur backend↔Teams flow at all, and cross‑tenant still works if u drop the bot once into the target channel so Teams rebuilds the serviceUrl then just allow the RSC.


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.