MS Teams Integration

[Facu Basgall]

Hi, do you have any implementation guide to integrate wazuh with teams?

Incoming Webhooks is deprecated by microsoft. 

[Md. Nazmur Sakib]

Hi Facu,

I believe you are trying to forward Wazuh alerts to a Microsoft Teams channel.

You can follow this document to integrate Microsoft Teams using Power Automate Workflows
https://cylenth.medium.com/wazuh-alerts-to-micrsoft-teams-integration-powerautomate-workflows-f718dbb1e4a3

Let me know if you need any further assistance.

[Facu Basgall]

I followed the documentation provided, I had to comment out the “if” of “logic.azure.com” in the .py as my hookurl is different, and I got the following error. Can you help me? 

[Md. Nazmur Sakib]

It is difficult for me to replicate this as I do not have access to an MS Teams subscription.
"error": {

        "code": "DirectApiAuthorizationRequired",

        "message": "The request must be authenticated only by Shared Access scheme."

    }

Please note that this error is specific to Power Automate. I would recommend posting this issue in the Power Automate forum:

Here is the link to the forum: https://powerusers.microsoft.com/t5/Forums/ct-p/FL_Comm_Forums

One of the experts should be able to assist you better.

Here are a few suggestions that might help resolve this issue:

1. Set the trigger as “Anyone”: In Power Automate, you can set the first field “Who can trigger the flow” as “Anyone”. When you save the flow, it will provide a new URL that does not require authentication when used. If you copy the updated link and assign it to the button, it should work (not recommended)

2. No Authentication: Try changing your Authentication Type to No Authentication under ‘2. Security’ and then try again.

3. A similar issue is discussed here. Please check if that helps.

Sharing some useful articles here, if that helps:

• This tutorial talks about how you can publish and manage an API in Azure APIM, export an API as a custom connector for Power Apps and Power Automate.

• Azure API Management connectors help to quickly publish Azure API Management-backed APIs to the Power Platform for easy discovery and consumption, dramatically reducing the time it takes to create apps connecting to Azure services. More Info here.

• This article talks about exporting APIs from Azure API Management to the Power Platform.

I hope you find this information useful.