---
title: Microsoft Teams
slug: microsoft-teams
description: Learn how to configure the integration of Microsoft Teams with TruffleHog. This document provides step-by-step instructions and outlines the necessary permissions and scopes required for accessing and reading mess
icon: {"faIcon":"fa-brands fa-microsoft"}
docTags: 
createdAt: 2024-04-17T14:48:12.055Z
---

# Microsoft Teams

:::BlockQuote
**Edition:** Enterprise only
:::

The Microsoft Teams integration scans channel messages and attachments in Microsoft Teams for credentials and other sensitive data.

## Configuration

The Microsoft Teams integration is configured in TruffleHog under **Integrations**. Local configuration is not available for this source.

Each integration scans a single team. To scan multiple teams, create a separate integration for each. 

### Web configuration

Configure this integration from the **Integrations** page in TruffleHog. Setup requires an admin account to grant permissions during the OAuth2 flow.

The integration requires the following scope:

- **ChannelMessage.Read.All** — read access to messages in all public and private channels within the team. Include/exclude filters narrow this scope at scan time.

When prompted, check **Consent on behalf of your organization** to grant access for all users in the organization. This option only appears for admin users.

**Finding your Team ID.** When the integration prompts for a Team ID, it expects the Microsoft Teams group ID for the team you want to scan.

Open Microsoft Teams. 

In the left pane, click the **...** menu next to the team name (not a channel) and select **Get link to team**. 

![](https://api.archbee.com/api/optimize/S23bFlGfp3a-8_a9YY_cE/c8vg2A9TZaScUunI9b8ji_image.png)

In the link that's generated, copy the value following groupId=. For example, in https\://teams.microsoft.com/l/team/.../?groupId=xxxxxx\&tenantId=..., the Team ID is xxxxxx. 

![](https://api.archbee.com/api/optimize/S23bFlGfp3a-8_a9YY_cE/g66egNumo-94ahApYyrkY_image.png)

## Capabilities

| Feature                     | Supported |
| --------------------------- | --------- |
| Scan channel messages       | ✅         |
| Scan private channels       | ✅         |
| Scan attachments            | ✅         |
| Scan archive files          | ✅         |
| Scan base64-encoded data    | ✅         |
| Scan binaries               | ✅         |
| Scan Microsoft Office files | ✅         |
| Include / exclude filters   | ✅         |
| Auto-resume                 | ✅         |

## Notes

- Direct messages are not scanned. The integration covers channel messages only.
- Scanning private channels requires authorization from the tenant admin during the OAuth2 flow.