Microsoft Teams alerts

Graften can post security alerts directly into a Microsoft Teams channel using an Incoming Webhook connector — no app registration or admin consent needed.

Setup

1. In Teams, go to the channel you want alerts posted to → ⋯ → Connectors → Incoming Webhook → Configure.
2. Name it (e.g. "Graften Alerts") and copy the webhook URL it gives you.
3. In Graften, go to Integrations → Microsoft Teams and paste the URL in.

What gets sent

Alert routing is configurable per alert type — by default, critical InfraAudit findings, dark web hits, patch compliance breaches, and critical risk items are sent immediately; a weekly health digest is sent every Monday at 08:00. You can toggle each category independently, and change the digest day/time, from the same Integrations page.

Testing it

Use POST /api/v1/integrations/teams/test to send a one-off test card without waiting for a real alert to fire — useful for confirming the webhook URL is still valid after a Teams channel gets renamed or recreated.

Current limitations

This is a one-way push (Graften → Teams) using a static webhook URL. There's no two-way interaction (you can't approve a change request from inside Teams, for example) — for actions like that, use the secure email links Change Control and Quote Approval already send.