Application Workspace for Microsoft Teams

Overview

This article provides general information about the Application Workspace integration with Microsoft Teams. For information about all the settings you must configure in Application Workspace, Azure Portal and Microsoft Teams, see Manual configuration of Application Workspace for Microsoft Teams and Wizard configuration of Application Workspace for Microsoft Teams.

App features

At the moment, only applications that are published to Workspace in Application Workspace are visible in Microsoft Teams.

Personal tab in Microsoft Teams

Application Workspace will be added as a personal tab in Microsoft Teams, in the left side menu.

AW43-MSTeams-integration-personal-tab.jpg

Side menu

Users can access filters, tags, categories or teams just like in Application Workspace.

Sorting

Besides the sorting options that are already available in Application Workspace, we added two extra ones: Frequently used and Recently used.

Theme

Only the dark and light themes of the Microsoft Teams are supported.

Localization

The localization of the app in other languages is not supported for the moment.

Prerequisites

To set up the Application Workspace for Microsoft Teams app you need to be able to perform the following things:

  1. Set up a new app registration in Azure Portal, Microsoft Entra ID (Azure AD).
  2. Be able to manage your organization's team environment and manage its apps.

Further reading

How to Register an App in Microsoft Entra ID" - Microsoft identity platform | Microsoft Learn

Manual configuration of Application Workspace for Microsoft Teams

Register the Application Workspace application in Microsoft Entra ID (Azure AD)

This article provides information about how to register Application Workspace in the Azure Portal, where you can find the Microsoft Teams app manifest files, how to download them and all the settings you need to configure to integrate Application Workspace in Microsoft Teams.

Prerequisites

Have an active Microsoft Entra ID app registration that is used to authenticate to Application Workspace.
Write down the URL where Application Workspace is accessible as you will need it during the configuration process. This value is indicated as <RECASTSOFTWARE-URL> in this document.

Configure API permissions on the Application Workspace Entra ID app registration

To allow the Teams application to authenticate users, the exchange token should be configured for Application Workspace. Read How to set up your exchange token for more information. Copy the scope from your app registration. This value is indicated as <RECASTSOFTWARE-Scope> in this document.

Register a new application in the Azure Portal

For the Teams app to authenticate to Application Workspace, you'll need to set up a new app registration in Microsoft Entra ID.

To set up a new app registration:

  1. Log into the Azure Portal.
  2. Navigate to Microsoft Entra ID.azure-portal-ms-entra-id.png
  1. In the left pane, navigate to Manage > App registrations.AW43_azure-portal-app-registration-menu
  1. Click on + New registration on the top toolbar.
  2. In the Register an application window that opens, configure the following:
    • Give your app a descriptive name. In our example, we use Application Workspace Teams App.            
    • In the Supported account types section, select 'Accounts in this organizational directory only (tenant only - Single tenant)'. For more information about the supported account types, see Microsoft documentation .

AW43-azure-portal-new-app-registration2.png

  1. Click Register on the bottom left, to complete the initial app registration.
  2. After registering the new application, make a note of the Application (client) ID from the overview menu option. It will be necessary later, for the Microsoft Entra app manifest generator. We will use < RECASTSOFTWARE-MST-App-ID> to reference this value.AW43-azure-portal-app-registration-client-id.jpg

Download the Microsoft Teams app manifest files

To download the Teams app manifest files:

  1. Navigate to the Application Workspace Download page.
  2. Fill in the fields:
Field value
Workspace URL <RECASTSOFTWARE-URL>
App registration identifier < RECASTSOFTWARE-MST-App-ID>
Workspace URL <RECASTSOFTWARE-Scope>
  1. When you finish, click Generate.AW43-downloads-page-MSTeams.png
  2. It will generate a zip archive containing 2 .JSON files. After the download is finished, extract the zip file into a directory. You will need these Microsoft Teams app manifest files for the next step.

Add the Application Workspace app manifest to Entra ID

  1. In the Azure Portal, open the Recast Teams App, you previously registered.
  2. Navigate to Manage > Manifest, and upload the appreg_1.json and for appreg_2.json files.AW43-azure-portal-app-registration-manifest.jpg

Publish the application to Microsoft Teams

To publish the application to Teams:

  1. Open the Microsoft Teams administrator centre and go to Teams apps > Manage apps.
  2. Click on the Actions dropdown menu > Upload new app.
  3. Select the package.zip in the extracted bundle directory. See Download the Microsoft Teams app manifest files section, step 4.MS_Teams5.png

NOTE: It can take some time before the app shows up in Microsoft Teams.

Set up CORS and CSP in Application Workspace

For the Microsoft Teams app to communicate with Application Workspace, you must configure CORS.

  1. In Application Workspace, navigate to Manage > Portal > Security Settings > Content Security Policy.
  2. Add the following link to the list of allowed websites:
https://workspace-apps.recastsoftware.com

AW43-CSP


Wizard configuration of Application Workspace for Microsoft Teams

Setting up the Microsoft Teams integration


This flow is supported in Application Workspace 4.3 and higher.


You'll need to enable token exchange on your identity source in order to have the Application Workspace for Microsoft Teams application authenticate your users.

To start rolling out Application Workspace for Microsoft Teams you need an Microsoft Entra ID (Azure AD) identity source set up. For the instructions on how to set up the Microsoft Entra ID (Azure AD) identity source, see Microsoft Entra ID.

Initiating the wizard

  1. Open the Microsoft Entra ID (Azure AD) identity source and navigate to the Microsoft Teams tab.

    Microsoft Teams option for an Entra ID identity source

  2. Click Setup the Microsoft Teams app to initiate the wizard.

    Click the 'Setup the Microsoft Teams app' button.

  3. A new popup opens, prompting you to sign in to Azure Portal (if you are not already signed in). The account you use to sign in should be able to provide administrative consent on Azure App registrations. If the account you are currently signed in with does not have these privileges, choose the Sign in with another account option.

    Login with a user that can provide consent for Azure App registrations.

  4. After signing in, the screen that displays allows you to set up the Microsoft Teams app configuration. There are several options available here:
    • Name – The required name field will be used to deploy the Application Workspace in Microsoft Teams.
    • Supported accounts – The supported account type must be set corresponding to your Application Workspace app registration. This allows you to control the type of accounts that are allowed to log in to the Teams app. If you need to provide access to external accounts, you might need to change these settings.

      Configure the Application Workspace for Microsoft Teams app.

    • App availability – Besides integrating with Microsoft Teams, the app can also be integrated within the Office 365 portal and with Microsoft Outlook. To ensure users are able to log in via these channels, additional permissions need to be granted for these channels.

If no popup opens, a popup blocker might be preventing the window from opening.

Deploy the app

After clicking deploy, the Success screen will appear.Generate the bundle

  1. Click the " Click here to generate your bundle" button to generate the Microsoft Teams app bundle in the form of a .zip file.
  2. Open a window to https://admin.teams.microsoft.com/policies/manage-apps

The account that signs in needs the permissions to create and distribute a new Microsoft Teams application.

  1. In the upper right corner click Actions to open up a new modal window which allows you to upload the zip file you downloaded in the previous step.Add a custom app.
Upload a custom app.
  1. After the upload is completed, a screen like the one below will display. This means that the application has become available in the selected list of applications. This process also enables the application for both the Microsoft 365 portal and the Outlook app if configured so in the previous step. The application should now be available within the Microsoft Teams store.The app has become available in Microsoft Teams.

Microsoft Entra ID (Azure AD) and Application Workspace configuration

In Microsoft Entra ID (Azure AD), in the app registration used for the identity source and SSO to Application Workspace, you need to expose an API for token exchange. You also need to add the Application ID URI of the Entra ID app registration to the Application Workspace identity source.
In case you use CSP or CORSm you need to allow the following domain: https://workspace-apps.recastsoftware.com.
For a step-by-step guide on how to do these, see How to set up your exchange token.

Security settings

Content Security Policy (CSP) and/or Cross-Origin Resource Sharing are enabled by default. In order to let Application Workspace communicate with Microsoft Teams you need to add the URL https://workspace-apps.recastsoftware.com to both configuration options.

Pinning the app for your users


The following step is an optional one, you can skip this if it is not required for your organization.

Navigate to: https://admin.teams.microsoft.com/policies/app-setup/.

This page will display all the policies that apply to Microsoft Teams apps within your tenant. Select the policy you want to leverage to pin the app.

Further resources

YouTube demo video that shows the configuration

Release Notes

4.3.4084.0


Changes

  • Implementation for the rebrand

4.3.4070


Bugfixes

  • Batch request can fail in some cases.

4.3.3944


Bugfixes

  • Unable to add team members to a team.

4.3.3930


Change

  • Azure Entra ID identity source Teams integration page will display a warning for missing domain hint and Token Exchange authentication method not being enabled.

Bugfixes

  • Setting up the Teams integration fails directly after changing the Entra ID domain hint or Token Exchange Application ID URL.

4.3.3867


Change

  • Extended error messages on the Application Workspace for Microsoft Teams app.

4.3.3851


Starting this version the configuration of the intergration can also be done from Application Workspace Ui, through a wizard. For more information, see Wizard configuration of Application Workspace for Microsoft Teams.
The integration was also rebranded to align with the Application Workspace 4.3

4.2.3587


Liquit Workspace for Microsoft Teams app

Provide an enriched user experience by integrating the features of Liquit Workspace into Microsoft Teams platform. The Liquit Workspace for Microsoft Teams app is now available for preview. For more details, see Liquit Workspace for Microsoft Teams (preview).