Feedback - Explain token.botframework.com in validDomains and how to support regional bot service

[Benjiiim]

Type of issue

Missing information

Feedback

Would you mind documenting in the "To configure app manifest" section that "token.botframework.com" should be added in the validDomains property of the manifest (it is in the example) and explaining if and how this value should be customized based on the location of Azure Bot Service (related to https://learn.microsoft.com/en-us/azure/bot-service/ref-oauth-redirect-urls?view=azure-bot-service-4.0).

Page URL

https://learn.microsoft.com/en-us/microsoftteams/platform/bots/how-to/authentication/bot-sso-manifest

Content source URL

https://github.com/MicrosoftDocs/msteams-docs/blob/main/msteams-platform/bots/how-to/authentication/bot-sso-manifest.md

Author

@surbhigupta

Document Id

5f4e812e-2836-0c23-5b4f-e416ae624372

[microsoft-github-policy-service]

Hi Benjiiim! Thank you for bringing this issue to our attention. We will investigate and if we require further information we will reach out in one business day. Please use this link to escalate if you don't get replies.

Best regards, Teams Platform

[Prasad-MSFT]

Hi @surbhigupta12, could you please help adding a note in this documentation section stating that,

Adding token.botframework.com to the validDomains property is necessary for bots that use the Bot Framework to handle authentication and token exchange.
The OAuth URL & OAuth redirect URL to use with your bot and identity provider can be customized based on your data residency requirements and whether your bot is in the public cloud or the Microsoft Azure Government cloud or the Microsoft Azure operated by 21Vianet.
Ref: https://learn.microsoft.com/en-us/azure/bot-service/ref-oauth-redirect-urls?view=azure-bot-service-4.0

@Benjiiim, please feel free to add if i missed anything.

[Benjiiim]

Thanks a lot @Prasad-MSFT

To my mind, it would be good to split this improvement in three location:

• Explaining that token.botframework.com (or the right regional variant) should be added in the validDomains property in the Update app manifest for SSO and preview your app page.
• Explaining that the right OAuth URL should be configured in the code (in the right env variables used by the bot framework sdk) in the Add code to enable SSO page.
• Explaining that the right OAuth redirect URL should be configured in the App Registration in the Configure your app in Microsoft Entra ID page.

[Prasad-MSFT]

Thanks @Benjiiim for your input. Hi @surbhigupta12, need your help here to update the document as suggested.