Microsoft Teams: Agent and bot support for Entra authentication in group chats

Agents and bots in Microsoft Teams group chats will now be able to authenticate through Entra. When an app requests a user's Entra token in a group chat, if that user does not have the Teams app installed and/or has not granted Entra consent, they are sent a targeted message. This targeted message is only visible to that user and serves two purposes: to prompt the user to install the Teams app and to open the Entra permission consent dialog. Once both requirements are met, the app can leverage Entra for the requested permissions (such as Graph).

This message is associated with Microsoft 365 Roadmap ID 503557.

[When this will happen:]

• General Availability (Worldwide): Begins November 3, 2025, and completes by November 6, 2025
• General Availability (GCC): Begins and completes November 6, 2025.

[How this affects your organization:]

• Who is affected: All Microsoft Teams users interacting with bots or agents in group chats.
• What will happen:
  • Agents and bots will be able to request Entra permissions in group chats.
  • Previously, this was only supported in one-on-one chats (personal scope).
  • No changes to how Entra consent is captured.
  • The app can now surface an authentication entry point in the group chat UI: 





• Feature is enabled by default; no admin action required to turn it on.

[What you can do to prepare:]

• No action is required to enable this feature.
• If bots or agents continue to send errors related to Entra authentication in group chats after rollout, notify the application developer.
• Some apps may need to update their logic to use the authentication API in group chats as they do in personal scope.

Learn more: Enable SSO for your app | Microsoft Teams | Microsoft Learn

[Compliance considerations:]

No compliance considerations identified, review as appropriate for your organization.