Conversational AI SSO with MS Teams

[former_member275873]

Dear All,

Request you to let me know if it is possible to configure the SSO (Single Sign On) for Conversational AI wherein messaging channel is Microsoft Team (via MS Azure)?

The bot is planned to consume the On-premise (SAP ECC) data via middleware (node.js, python) developments in SAP Cloud Foundary. Hence intgeration would be:

MS Teams (via MS Azure) -> Bot Builder -> SAP Cloud Platform (SAP Cloud Foundry) -> SAP Cloud Connector -> SAP ECC

This involve the process of authenticating from MS Teams and then validating the user in SAP Cloud Platform and SAP ECC. Authentication can be directly planned from SCP to SAP ECC via cloud connector but needs to find the options for authentication from Teams -> SAP Cloud Platform.

Any inputs would be appreciated.

Best regards,

Amit

[roypappachan]

Hi Amit,

As far I talk to different stake holders from SAP & Microsoft, below as the possibilities.

1. SAP CAI only supports Multi tenant type of bot in Azure which is completely open to any to access if they have the app ID/ chatbot link. ( if the CAI supports single tenant / user defined bot types, there are options to restrict usings vai guest authetication in Azure.But still we cannot use authetication from SAP).

2. You can get the email id from memory parameter paticipant_data and then call an API for SCP authentication inside the bot using a custom intitalization skill. ( plz don't use CAI's default initialization skill ).

Hope it helps.

Incase if you find an alternative for the point 1. Please let me know. I'm also intertested in that case.

Thanks,

Roy

[jyguyomarch]

Hi Amit,

No this is not yet possible with MS Teams. Only client that can support that for now is the SAP Conversational AI Web Client when integrated in the Fiori Launchpad.

But we have MS Teams and Slack as potential clients for the enterprise on our backlog for the end of the year or Q1 next year.

BR - Jean-Yves

[cdlom]

Hi Jean,

Is this scenario with MS Teams still not posible?

Thanks in advance!

Regards

[norbertk]

Any update on that topic jean-yves.guyomarch? We would like to build a chatbot for MS Teams to create a leave request, and the user credentials should be propagated from MS Teams to an HCM backend - is this possible today?

Thanks an best regards, Norbert

[jyguyomarch]

norbert.klbl I am sorry to report that we don't have a solution here for MS Teams. We had to refocus our efforts on other channels and for now the MS Teams SSO had to be moved out of the roadmap.

Sorry to disappoint.

BR - Jean-Yves

[markus_theilen]

Hi jean-yves.guyomarch ,

we are facing the problem that integrating a CAI bot into MS Teams requires Mulit-Tenancy option to be activated in our Azure tenant. This is a real show stopper for us and prevents the productive use of the Bot. As far as we understand the Mulit-Tenant setup, everyone with knowledge of the App ID can use the Bot from any Azure Tenant. As long as there is no way to restrict the allowed tenants, this integration is simply not useable for us.

As far as I understand the topic, it is now possible for the Azure Bot framework to be used in Single-Tenant mode:
https://docs.microsoft.com/en-us/answers/questions/308518/bot-framework-app-registration-single-tena...

So can you give us a new indication, whether and when the otherwise nice Bot framework CAI will be usable in Teams?

Thank you in advance,

Markus