You are developing an outgoing webhook in Microsoft Teams. In the service that receives the outgoing webhook request, what should you validate to ensure that calls are coming from Microsoft Teams?

The correct answer is A. the HTTP hmac header. A Hash-based Message Authentication Code (HMAC) is a security token used to authenticate calls between Teams and the designated outside service, such as an outgoing webhook request. The HMAC security token doesn't expire and is unique for each configuration…

Extend Teams

Question

Options

Athe HTTP hmac header
Bthe Microsoft Teams client cookies
Cthe Microsoft Graph API
Dthe bearer token

How the community answered

(63 responses)

A
71% (45)
B
6% (4)
C
5% (3)
D
17% (11)

Explanation

A Hash-based Message Authentication Code (HMAC) is a security token used to authenticate calls between Teams and the designated outside service, such as an outgoing webhook request. The HMAC security token doesn't expire and is unique for each configuration. https://docs.microsoft.com/en-us/microsoftteams/platform/webhooks-and-connectors/how-to/add- outgoing-webhook

Topics

#outgoing webhook#HMAC#Teams security#webhook validation

Community Discussion

No community discussion yet for this question.

Full MS-600 Practice