search close

Microsoft Teams

access_time Updated Jan 11, 2022

Our Teams integration allows you to be notified when certain activity occurs on Signal Sciences.

Adding Teams integration

  1. Get started by adding a custom incoming webhook within Microsoft Teams:

    Note: Ensure that you copy the webhook URL to your clipboard from Microsoft Teams.

  2. In Signal Sciences:

    • For a Corp Integration, navigate to Corp Manage > Corp Audit Log > Manage corp integrations > Add corp integration and select the Microsoft Teams integration.

    • For a Site Integration, navigate to Site Manage > Site Integrations > Add site integration and select the Microsoft Teams integration.

  3. Enter the email address or alias you want notifications to be sent to.

  4. Select if you want email notifications for all activity or specific activity.

  5. Click Add.

  6. Paste the webhook URL into the dialog box.

  7. Click Add.

Note: We will send all activity to Teams by default. To limit the integration to only send specific types of activity, select Specific activity and choose which activity types you’d like to trigger the integration.

Activity types


Activity type Description
releaseCreated New release notifications
featureAnnouncement New feature announcements
corpUpdated Account timeout setting updated
newSite A new site was created
deleteSite A site was deleted
enableSSO SSO was enabled for the corp
disableSSO SSO was disabled for the corp
corpUserInvited A user was invited
corpUserReinvited A user was reinvited
listCreated A list was created
listUpdated A list was updated
listDeleted A list was removed
customTagCreated A custom signal created
customTagDeleted A custom signal updated
customTagUpdated A custom signal removed
userAddedToCorp A user was added to the corp
userMultiFactorAuthEnabled A user enabled 2FA
userMultiFactorAuthDisabled A user disabled 2FA
userMultiFactorAuthUpdated A user updated 2FA secret
userRegistered A user was registered
userRemovedCorp A user was removed from the corp
userUpdated A user was updated
userUndeliverable A user’s email address bounced
userUpdatePassword A user updated their password
accessTokenCreated An API Access Token was created
accessTokenDeleted An API Access Token was deleted


Activity type Description
siteDisplayNameChanged The display name of a site was changed
siteNameChanged The short name of a site was changed
loggingModeChanged The agent mode (“Blocking”, “Not Blocking”, “Off”) was changed
agentAnonModeChanged The agent IP anonymization mode was changed
flag An IP was flagged
expireFlag An IP flag was manually expired
createCustomRedaction A custom redaction was created
removeCustomRedaction A custom redaction was removed
updateCustomRedaction A custom redaction was updated
customTagCreated A custom signal was created
customTagUpdated A custom signal was updated
customTagDeleted A custom signal was removed
customAlertCreated A custom alert was created
customAlertUpdated A custom alert was updated
customAlertDeleted A custom alert was removed
detectionCreated A templated rule was created
detectionUpdated A templated rule was updated
detectionDeleted A templated rule was removed
listCreated A list was created
listUpdated A list was updated
listDeleted A list was removed
ruleCreated A request rule was created
ruleUpdated A request rule was updated
ruleDeleted A request rule was deleted
customDashboardCreated A custom dashboard was created
customDashboardUpdated A custom dashboard was updated
customDashboardReset A custom dashboard was reset
customDashboardDeleted A custom dashboard was removed
customDashboardWidgetCreated A custom dashboard card was created
customDashboardWidgetUpdated A custom dashboard card was updated
customDashboardWidgetDeleted A custom dashboard card was removed
agentAlert An agent alert was triggered