Overview
This documentation outlines the step-by-step procedure to post automated messages to a Microsoft Teams channel using an Incoming Webhook. This functionality is particularly useful for integrating third-party applications or services to send real-time updates directly into MS Teams channels.Pre-requisites
Users must have owner or member access to the Microsoft Teams channel.Microsoft Teams app installed or access via Teams Web.Permission to manage connectors in the selected channel.
Configure Incoming Webhook in MS Teams
1
Open Microsoft Teams
- Launch the Microsoft Teams app or navigate to teams.microsoft.com.
- Sign in using your organizational credentials.
2
Create a New Target Team & Channel
If you already have Target Teams & Channel to integrate, skip this step.
- In the Teams sidebar, select the Chat icon.
- Navigate to Teams and channels, click on the more options ellipsis (⋯).
- Select Your teams and channels, and click on Create team icon in the top right corner.
-
In the Create a team pop-up, enter the mandatory values
- Team name: (For example
AirMDR Logs) - Name the first channel: (For example
Workflow Test Channel)
- Team name: (For example
- Click Create.
3
Navigate to the Target Team & Channel
- In the Teams sidebar, select the desired Team.
- Click on the specific Channel (For example
Workflow Test Channel) where you want to post messages.
4
Open Channel Options
-
Click on the more options ellipsis (⋯) next to the channel name (For example
Workflow Test Channel). -
Select Workflows from the context menu you want to setup for your team.
If you do not see “Workflows,” ensure the feature is enabled in your tenant or contact your IT administrator. -
In the pop-up search for and choose “Post to a channel when webhook request is received” option.
For this workflow to run, all apps must have a valid connection. - Select the radio button option beside Microsoft Teams option.
- Click Next.
5
Add Workflow
- In the Details, select your Microsoft Teams Team and Microsoft Teams Channel.
- Click Add workflow.
- In the same pop-up window, click on Manage your workflow option at the bottom left corner.
-
Click Edit, to manage your workflow.

-
Once the User is redirected to the edit page, double-click on the respective display boxes to expand and view the content.

-
Double-click and select “When a Teams webhook request is received” option to view “who can trigger the flow” and the “POST URL”.
Copy the POST URL for future reference. That is, for the connector credential and webhook configuration in the AirMDR web interface.
-
Double-click and select “Send each adaptive card” option.
-
In the “Select an output from previous steps” search box, follow the below steps to ensure the output format is set to attachments
- Delete the existing body.attachments
-
In the Dynamic content list, select the attachments.

- For private Team channels, use the dropdowns to set Post as: Flow Bot.
- Make sure Post in, Team and Channel fields are pointing to correct desired values.
-
Ensure the Adaptive card is defined as content.

-
In the “Select an output from previous steps” search box, follow the below steps to ensure the output format is set to attachments
-
Double-click and select “When a Teams webhook request is received” option to view “who can trigger the flow” and the “POST URL”.
- Click Save.
Send a Message using the Webhook
User can now send a message using a simple HTTP POST request using Postman or cURL. Example POST Request using cURL:Replace
<Workflow_URL> with the URL copied from the Teams UI.202 Accepted
Configure Microsoft Teams in AirMDR Integrations Dashboard
- Navigate to AirMDR, provide the credentials and click Login
- Navigate to the AirMDR Integrations Dashboard in the left navigation pane and select Integrations.
-
Use the search option, enter the keyword “Microsoft Teams”, select the Connections tab, and click + Create button.

-
Enter an unique name to the Instance (e.g.,
your org name-MSTeams) to easily identify the user connection by AirMDR. -
Enter the generated Webhook URL in the Authentication Details field params, and click Create.

🔄 Managing or Deleting the Webhook
To manage the webhook:- Go to the channel’s connectors (as in Step 3).
- Click Configured (top-left tab).
- Locate your webhook, and click Manage or Remove.
🛑 Security & Access Best Practices
- Rotate webhook URLs periodically for security.
- Do not expose webhook URLs in public repositories or logs.
- Use appropriate naming conventions to identify webhook sources.

