IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Approve message from teams

    Posted Fri October 04, 2024 06:20 AM

    Hello Team,

    I am wondering how to get approval from Microsoft teams that will trigger the playbook in SOAR.

    Is there any other alternatives for approval?



    ------------------------------
    Swapnil Rupnawar
    Senior Security Automation Analyst
    ------------------------------


  • 2.  RE: Approve message from teams

    Posted Mon October 07, 2024 07:13 AM

    Hi Swapnil, 

    We are near completion of an update to the MS Teams app which will support the MS Workflows capability. This will replace existing the webhook solution which will be deprecated by the end of the year. Once this capability is in place, we will layer an approval process where requests for approval can be posted to a MS Teams channel and continue to check for a response. That capability will be most likely be available closer to the beginning of the new year.

    We can provide more details on the approval process if you're interested. 

    Regards,

    Mark



    ------------------------------
    Mark Scherfling
    ------------------------------

    Original Message


  • 3.  RE: Approve message from teams

    Posted Fri April 04, 2025 01:00 PM

    Hello Mark. Is this the 10/18/2024 v2.2.0 Teams App on the App Exchange or is there another one to look for? I am interested in the approval process, how it works with Power Automate, etc.

    Thanks as always!



    ------------------------------
    ken ching
    ------------------------------

    Original Message


Related Content