Integrating Microsoft Teams with Ivanti Neurons for ITSM

role administrator minimum version 2021 1 seamlessly integrates with microsoft teams bot to create a custom teams app this enables self service users to chat with service desk analysts, create incidents, submit customized service requests, and check the status of their tickets from the teams app this enhanced integration improves user experience by streamlining itsm interactions directly within microsoft teams for environments upgraded to version 2026 2, ivanti recommends administrators to remove the existing bot configuration and create a new bot using the updated ui create the new bot by following the steps described in the sections below integration process prerequisites enable the global constant from the configuration console > global constants > msteamsintegrationenabled > set it to true by default, this option is set to false enable the chat feature refer to configuring the chat feature docid\ ek9ni60x4zyjksob1ocq6 ensure microsoft teams application is installed on your computer with admin credentials for on‑premises deployments, ensure that secure sockets layer (ssl) is enabled ssl is mandatory for the integration to function correctly and does not apply to cloud environments it is recommended to set up the chat application first, followed by the teams bot application creating the teams app from microsoft teams app studio log in to your microsoft teams account open the microsoft teams developer portal https //dev teams microsoft com/home clients must have an account for the teams bot to function in the microsoft teams developer portal , the new user interface opens by default when customers access it, without requiring any additional configuration go to home , click create a new app in the create a new app window, provide a name for the app and select latest stable as manifest version and click create in the configuration page, click basic information enter the following details fields description details app details short name and long name contextual names of the app app id this is auto generated by microsoft app studio version version number short description and long description contextual descriptions of your app developer/company name your company name website your company website url privacy statement url to the privacy statement of your organization terms of use url to the terms of use or policy page of your organization ensure that you fill in the app fields (short name and long name) and the description fields (short description and long description) if any of these fields are not filled in, the app upload may fail optionally, click branding to add a branding logo or other elements of your organization click save create, configure, generate client secret key and link a bot to microsoft teams app open the microsoft teams developer portal https //dev teams microsoft com/home and log in once you have logged in, you can now create your bot go to apps click on the app you created in the right pane, under configure , click app features , and then click bot select an existing bot from the drop down or click create a new bot in the bot management , a list of existing bots is displayed to create a new bot, click add and enter a name for the bot, then click create bot after creating your bot, configure it and generate the client secret key by following the below steps to configure the bot a once the new bot is created, click on it this will take you to the configure page and the configure section is displayed you will also need the bot id to complete the integration between microsoft teams and neurons for itsm the bot id is displayed in the url copy and save the bot id from the url, which is the value between /bots/ and /configure example https //dev teams microsoft com/bots/your bot id/configure below is a sample screenshot with the bot id in the url image of the masked bot id from the url b in the configure panel, add the bot endpoint address and save the bot endpoint address should be in the following format https //{customer tenant id}/ivantibotservice/api/messages? to maintain secure communication, restrict public access to the bot endpoint address revealing the endpoint will result in unauthorized access or misuse of the bot service only the itsm tenant address should be publicly accessible generate the client secret key for the bot a click the client secrets option on the side panel and select add a client secret key for your bot a dialog box with the auto generated client secret key for your bot is displayed b copy and save the secret key to use it when configuring the integration between neurons for itsm and microsoft team app this client secret key is displayed only once ensure you save it securely now that you have created the bot, go through the following steps to link the bot to the microsoft teams app in the microsoft teams developer portal https //dev teams microsoft com/ , go to the app , select your app from the list click on app features and click bot choose a bot from the select an existing bot drop down or manually enter the bot id , you want to configure in the what can your bot do? section, select upload and download files under scope , select personal checkbox, and click save optionally, in the commands section, click add a command to add commands to the ms teams bot app and click confirm after adding all the commands, click save to save all the settings commands are added to the bot to define its functionality and allow users to interact with it in specific ways by setting up commands , you enable the bot to perform tasks, respond to user input, and provide useful actions like retrieving information, sending messages, or performing other automated functions this helps users engage with the bot more effectively in microsoft teams typing a command interrupts the current flow and starts the specified flow for example, if a chat analysis runs and you type create incident, the system stops the chat analysis and starts the create incident flow you can create more than one command neurons for itsm supports the following commands startchatanalyst stopchatanalyst createincident myitemstatus bothelp createservicerequest adding a bot command update domains fields in an existing teams app when you upgrade to 2025 4 version, a new teams feature displays kb and faq suggestions in pop up windows to support this feature, you must update the domains field in your existing teams to update the app in the microsoft teams developer portal, open the existing bot app increment the app version (for example, from 1 0 0 to 1 0 1) add the tenant id to the domains section as a valid domain 'stg url ivanticloud com' represents the expected format of the url it does not correspond to a real customer environment now that you have successfully performed all the previous steps and created the ms teams bot app download the package for the microsoft teams bot app go to the publish section and choose app package click publish on the top right corner of the page in the new ui of the microsoft teams developer portal, the distribute button appears in the top right corner instead of publish select the download the app package from the pop up to download the app package for the ms teams bot app if this app is intended for organization‑wide use, share it with your it administrator and publish it to your organization for testing or demo purposes, download the app package and deploy it individually in your teams instance upload the new package using one of the following methods through the teams admin center directly in microsoft teams, depending on your deployment method verify that the updated version is installed and available to users this step is required by microsoft to ensure the app is properly packaged and ready for deployment within microsoft teams image of the download the app package pop up uploading the app in microsoft teams you can upload the teams app and make it available for employees in your organization to use only when the app is uploaded and available, users can add it to their microsoft teams client app and use it as a communication channel to chat with service desk analysts, create incidents, and view incidents' statuses log in to your microsoft teams account go to apps > manage your apps > upload an app choose an option upload a custom app – if the app is for individual or team use submit an app to your org – if the app is for organization wide use the app you built is now available for employees in your organization/team to use configuring the integration between microsoft teams and neurons for itsm the microsoft teams integration is complete after configuring the integration in log in to neurons for itsm from the configuration console, click extend > microsoft teams integration enter the following information field description bot id enter the bot id that you copied and saved while creating the teams app bot refer to the steps in creating the teams app from microsoft teams app studio docid\ a2e6tiaboyevychethshy section bot secret key enter the microsoft bot secret key this is the teams app password that was generated and saved while creating your teams app in microsoft app studio refer to steps in creating the teams app from microsoft teams app studio docid\ a2e6tiaboyevychethshy section allow user only with employee email id after the first level of authentication by bot id and bot secret key, this option allows setting a second level authentication selecting this option, you will be restricting access to the teams app you created to users with registered employee email id in allow user only with org email domain names after the first level of authentication by bot id and bot secret key, this option allows setting a second level authentication selecting this option, you will be restricting access to the teams app you created to users with email address in the specified domains you can add the domain names you want to allow in the microsoft teams org email domain name tab for example, if you allow ivanti com and ivanti in domain names, then users having email addresses such as xyz ivanti com and xyz ivanti in will be allowed to access the teams app validate teams user email id with existing employee account selecting this option, the customer name for incidents created through teams app and the chat display name when chatting from teams app will have the registered user name if the user is not registered in , then the name specified in the default account for managing non registered users field is used default account for managing non registered users specify the default user name this will be used as the customer name for incidents created through teams and for the chat display name in the following scenarios when the validate teams user email id with existing employee account option is selected but the user is not registered in when the validate teams user email id with existing employee account option is not selected and/or the user is not registered in number of tickets to display when the user selects the check the status of my ticket option in a chat, the number of tickets that should be displayed is set in this field the default is set to 10 which the maximum limit, user can set a number between 1 to 10 an error message is displayed when the number is set to anything above 10 the tickets created by users through any channel such as microsoft team, bot, email, or the application will be displayed ism api key you must create a new specific key designated for teams and roles set to admin if a new key cannot be created, use the existing key where the role is already set to admin the ism api key can be created or copied from configure > security controls > api keys custom messages use the fields in this tab to add custom messages and responses your teams app should display microsoft teams org email domain name this tab is available only when you select the allow user only with org email domain names option for second level authentication you can add the domain names allowed to access the teams app click save configure email address for microsoft teams bot access to use the microsoft teams bot with your itsm account, ensure that your email address is correctly configured in the itsm portal these steps applicable only to ism users log in to the itsm portal, navigate to the employee workspace create a new user record and enter the user name and email address in the appropriate fields save the changes by default, changes takes up to 30 minutes to avoid this and to reflect changes in the microsoft teams bot, clear the cache perform the following go to settings > cache management click on reset teamsbot objects this configuration step is not required for non ism users configuring bot with email address configuring custom questionnaire in teams bot for incident creation you can configure custom questions in the teams bot before initiating an incident creation the supported fields for customization include summary , description , impact , and urgency additionally, you can configure any text based incident field based on your specific requirements this flexibility allows you to customize the teams bot interaction to gather relevant information for a more detailed incident creation process you cannot configure fields with duplicate display names in some cases, the teams bot may not respond as expected due to a missing central config api key entry in the teams bot appsettings json file this setting is part of the internal configuration and is not included in the standard documentation if you've followed all setup steps and are still experiencing issues, please reach out to the ivanti support team for assistance configuration changes should only be made under the guidance of support to ensure system integrity to configure the custom questionnaire open configuration console, and click microsoft teams integration under extend go to incident question library tab add a new question or edit the existing question incident question library tab click save adding custom fields in the incident question library open the configuration console navigate to build > pick lists select microsoftteamsincidentfieldpicklist from the get list data drop down list under constraints , add a new constraint for the custom field click save adding custom fields to the incident question library applying object permission filters to kb and faq collections you can control which knowledge base (kb) collections are available in microsoft teams use object permissions to apply filters that restrict or allow specific kb content for self service users for example, you can hide articles about company policies and procedures while keeping other collections available go through the following steps to add filters log in to as an administrator in the configuration console, expand the configure section, expand users and permissions > roles and permission , and select self service user role open object permissions in the find box, search for the business object name frs knowledge to apply object filters for faqs, search for business object name faq locate the object and select edit click the button to add a new case apply the required filters the screenshot shows the collection filter applied for frs knowledge the screenshot shows the collection filter applied for faq click update and then save the filters you configure define which knowledge base articles and faqs self service users can access in the microsoft teams bot this helps administrators tailor kb collections to meet organizational policies and compliance requirements flow without the filters shows possible matches of the kb articles along with faqs based on the input flow with filters only the faqs are shown for the same previous input and all kb articles are filtered out enabling feedback flow for microsoft teams you can manage the feedback flow in microsoft teams by default, the feedback card is turned off you can enable or disable it in the admin ui go through the following steps to configure this setting log in to as an administrator in the configuration console, build > click microsoft teams integration open session configuration settings locate enable feedback card by default, this option is disabled to enable feedback flow, check the box and clear the cache enable feedback card enabling service request for microsoft teams request offerings published in itsm are configurable in the ms teams bot navigate to the request offering workspace and check the enable for teams bot option no additional configuration is required, providing a seamless experience log in to as an administrator select more > request offering select an offering from the list in the define request offering tab, select the enable for teams bot checkbox to enable this in the teams bot only request offerings with the bell icon have the enable for teams bot checkbox available click save limitations and tips for using the service request feature in ms teams bot to get the best out of the service request feature in the ms teams bot, here are some key points to keep in mind form design limitations advanced features like aligning rows or adding custom masking to text or numeric fields, are not supported by the bot pick list restrictions certain fields in pick lists, such as pricing or descriptions, are not supported in the bot also, select all and multiselect options are unavailable in the bot expression limits complex formulas or expressions that directly reference other fields or objects are not supported in the bot functions, like “!” are not supported by the bot file uploads you can upload one file per upload field in a service request template supported formats are png, jpg, pdf, jpeg, or doc dropdowns default values in drop downs are not supported by the bot all options are listed any preselection validation rules complicated rules, especially those that rely on matching field names and values, aren’t supported by the bot ivanti recommends usage of supported features ensure to test the service request templates before deployment