Platform

Microsoft Teams Integration

Email is where identity tasks go to die. Bring reviews, PIM, provisioning, and support into Microsoft Teams with the same permissions as the User Portal and no parallel access model.

Request a DemoSee User Portal

How Teams actions work

Notify in channel or private card, decide inline, enforce the same portal permissions, and audit with source attribution TEAMS.

Users only see capabilities available to them in the Self-Service Request Hub.

1
Notify
Channel or private card
2
Decide
Approve inline
3
Enforce
Same portal permissions
4
Audit
Source: TEAMS
PIM requestActionable
Campaign reviewInteractive card
Create accountNative wizard
My ticketsRead-only

Two integration tiers

Choose the depth that matches your Teams deployment and security requirements.

Both tiers use the same Custodeum permissions model as the User Portal. Teams never introduces a separate access path.

Tier 1: Basic

Channel notifications via Microsoft Graph. Read-only posts with links back to Custodeum. No bot deployment required.

Tier 2: Advanced

Private chat from the Custodeum bot with Adaptive Cards to approve, reject, flag, and comment inline. Single-use action tokens.

Notifications & Actions

Campaign reviews, PIM approvals, provisioning notifications, and reminder digests via channel broadcast or interactive private cards.

  • Campaign review assigned
  • PIM approval required
  • Provisioning notifications
  • Reminder and digest messages
Self-Service Request Hub

The Teams bot Home launcher organizes capabilities by category. Users only see options available to them.

  • Requests: native PIM form
  • Provisioning: create accounts from templates
  • Approvals: PIM and campaign reviews inline
  • Support: My Users, Guided Workflows, My Tickets
  • My Access: apps and entitlements
Policy Modes

Each capability is admin-configured as Disabled, Read-only (opens web portal), or Actionable (full native Teams experience).

  • Optional step-up verification (Okta Verify)
  • Natural-language commands supported
  • Paginated message log for troubleshooting
Security

Traffic validated against your Microsoft tenant. Short-lived, single-use tokens for card actions. Full audit of every Teams-initiated decision.

  • Tenant and endpoint validation
  • Users mapped via M365 identity sync
  • Source attribution in audit (TEAMS)

Where it fits in Custodeum

Teams is a channel into the same operational layer as the User Portal.

User Portal

Web surface with identical permissions.

Learn more
Privileged Access

Approve elevation in Adaptive Cards.

Learn more
Governance

Campaign review cards and digests.

Learn more
IT Support Ops

My Users and Guided Workflows.

Learn more

Meet identity work where people already are

See notifications, Adaptive Cards, and the Request Hub on your Microsoft tenant.

Request a DemoExplore User Portal