IBM QRadar SOAR

 View Only
Expand all | Collapse all

Approve message from teams

  • 1.  Approve message from teams

    Posted Fri October 04, 2024 06:20 AM

    Hello Team,

    I am wondering how to get approval from Microsoft teams that will trigger the playbook in SOAR.

    Is there any other alternatives for approval?



    ------------------------------
    Swapnil Rupnawar
    Senior Security Automation Analyst
    ------------------------------


  • 2.  RE: Approve message from teams

    Posted Mon October 07, 2024 07:13 AM

    Hi Swapnil, 

    We are near completion of an update to the MS Teams app which will support the MS Workflows capability. This will replace existing the webhook solution which will be deprecated by the end of the year. Once this capability is in place, we will layer an approval process where requests for approval can be posted to a MS Teams channel and continue to check for a response. That capability will be most likely be available closer to the beginning of the new year.

    We can provide more details on the approval process if you're interested. 

    Regards,

    Mark



    ------------------------------
    Mark Scherfling
    ------------------------------

    Original Message