Skip to main content

Glean in Microsoft Teams: Admin guide

Glean in Microsoft Teams brings Glean's enterprise search and generative AI experience directly into Teams, so users can find information, ask questions, and get personalized answers without leaving their flow of work.

This guide walks administrators through the requirements and setup process to deploy the Glean app in Microsoft Teams, publish it to their organization, and complete the integration in the Glean Admin Console.

Requirements

You need admin access to each of the following portals to complete the setup:

Setup overview

Phase 1

Set up Azure Bot and Glean app

Create Azure Bot · Configure app · Set up Teams package

Collect: Application (client) ID, Client secret

Phase 2

Deploy via Teams Admin Center

Publish app · Manage access · Pin to sidebar

Collect: Glean in Microsoft Teams App ID

Phase 3

Enable in Glean Admin Console

Enter credentials · Save · Share user guide

Integration complete

Phase 1: Set up Azure Bot and Glean app

Create the Azure Bot

  1. In the Azure portal, search for Azure Bot in the search bar and select it from the Marketplace results (not Services). Alternatively, go directly to the Create an Azure Bot page.

  2. Click Create, then on the Basics tab, configure the following:

    FieldValue
    Bot handleGlean
    SubscriptionYour Azure subscription
    Resource groupClick Create new
    RegionSelect the Azure region closest to your Glean deployment. For example, if your deployment is in GCP europe-west4, select West Europe; if it is in AWS us-west-2, select West US 2.
    Pricing tierSelect the F0 (Free) tier. Standard channels such as Microsoft Teams offer unlimited messaging at this tier. For a full breakdown of channel types and messaging limits, refer to the Azure Bot Services pricing page.
    Type of AppSingle Tenant
    Microsoft App IDCreate new Microsoft App ID

    Create an Azure Bot — Basics tab

  3. Click Review + create, review the configuration, then click Create.

    Create an Azure Bot — Review + create tab

  4. When the deployment completes, click Go to resource.

    Azure deployment complete

Configure the bot

  1. In the bot resource, select Bot profile in the left navigation. Upload the Glean color icon and set the display name to Glean.

  2. Select Configuration in the left navigation. In the Messaging endpoint field, enter your Glean backend URL followed by /datasources/ms_teams/activity. For example: https://[your-instance]-be.glean.com/datasources/ms_teams/activity.

    Verify that Microsoft App Type is set to Single Tenant, then click Apply.

    Azure Bot configuration — messaging endpoint

  3. Select Channels in the left navigation. Under Available channels, click Microsoft Teams. Select Microsoft Teams Commercial and click Apply.

    Azure Bot channels — Microsoft Teams configured

  4. Select Configuration again and click Manage Password (next to the Microsoft App ID field). On the Certificates & secrets page, click New client secret, add a description, then click Add.

    note

    Copy the client secret value immediately — you cannot retrieve it after navigating away. You will need this value in Phase 3.

  5. Select Overview in the left navigation and copy the Application (client) ID. You will need this value in Phase 3.

    Azure App Registration overview — Application (client) ID

Create the Glean app

  1. Go to the Teams Developer Portal. In the left navigation, select Apps, then click + New app.

    Teams Developer Portal — Apps page

  2. In the Add app dialog, enter Glean as the name and click Add.

    note

    This is the name that appears in the Teams Admin Center and to end users in Microsoft Teams.

    Teams Developer Portal — Add app dialog

  3. In the Basic information tab, fill in the following fields:

    FieldValue
    Short descriptionTrusted search and generative AI for work.
    Long descriptionGlean unlocks your company's knowledge and enables powerful work AI for everyone.
    Developer or company nameGlean Work
    Websitehttps://www.glean.com
    Privacy policyhttps://www.glean.com/privacy-policy
    Terms of usehttps://www.glean.com/terms
  4. In the Application (client) ID field, paste the Application (client) ID you copied earlier, then click Save.

Customize branding

  1. In the left navigation, select Branding. Upload the color icon and outline icon, and set the accent color to #343ced.

    Teams Developer Portal — Branding page

Configure app features

  1. In the left navigation, select App features, then click Bot.

    Teams Developer Portal — App features

  2. Select Enter a bot ID and paste the Application (client) ID you copied earlier. Under Select the scopes where people can use your bot, select Personal only (the current version supports personal DM only). Click Save.

    Teams Developer Portal — Bot configuration with Personal scope

  3. Click Add a command to add starter prompts. Starter prompts appear when users first open the Glean app in Teams. The following prompts are recommended:

    Command titleCommand
    Summarize documentsSummarize <linked documents> and highlight key points on specific topics
    Help me writeWrite an [email, company announcement, etc] on [project explanation]
    Who should I askWho is the subject matter expert on [topic] to ask about [describe question]?
    Learn more about a projectResearch a new project. Identify insights, resources, and subject matter experts
    Ask about a company policyFind and research company policies and answer specific questions.
    Learn about a teamResearch a team's focus area and current projects.
    Prepare for an executive reviewIdentify questions that could be asked during a presentation to an executive.
    Explain acronymExpand and provide a detailed explanation of the given acronym.
    BrainstormBrainstorm ideas for a presentation on [Project Name]
    Explain a technical termProvide a clear and simple explanation of a technical term.

    Teams Developer Portal — Add a bot command dialog

  4. (Optional) If you plan to enable channel or group chat support in the future, select Permissions in the left navigation. Under Team permissions, select ChannelMessage.Read.Group. Under Chat/Meeting permissions, select ChatMessage.Read.Chat.

    ChannelMessage.Read.Group permission

    ChatMessage.Read.Chat permission

  5. Refresh the page and return to App features. If a Personal app entry was added automatically, open its menu and click Delete.

    App features — delete Personal app

Publish the app to your organization

  1. In the left navigation, under Publish, select Publish to org. Click Publish your app, then select Publish to your org.

    Teams Developer Portal — Publish to your org

    note

    Deployment to specific groups or users is managed in the Teams Admin Center during Phase 2.

Phase 2: Deploy via Teams Admin Center

Publish the Glean app

  1. Go to the Teams Admin Center. In the left navigation, go to Teams apps > Manage apps. Search for Glean. The app status is Blocked by default.

    Teams Admin Center — Glean app with Blocked status

  2. Click the Glean app to open its settings, then click Publish to allow it.

    Teams Admin Center — Publish confirmation dialog

    After publishing, it takes approximately 24 hours for the Glean app to appear in the Teams store.

    Teams Admin Center — Glean app pending action status

  3. Copy the App ID shown on the Glean app page — you will need this value in Phase 3.

    Teams Admin Center — Glean app page with App ID highlighted

Manage access (optional)

  1. By default, the Glean app is available to everyone in your organization. To restrict access, go to the Users and groups tab within the Glean app settings and click Edit availability.

    Teams Admin Center — Edit availability options

Pinning the Glean app to the Teams sidebar makes it immediately accessible to users from the main Teams interface.

  1. In the Teams Admin Center left navigation, select Teams apps > Setup policies. Select the policy that applies to your target users, such as the Global (Org-wide default) policy.

    Teams Admin Center — App setup policies list

  2. Enable User pinning. Under Installed apps, click Add apps and add Glean. Your policy may already have other apps installed.

    Teams Admin Center — Installed apps in the selected policy

  3. Under Pinned apps, click Add apps, search for Glean, click Select, and click Add. Glean is added to the existing list of pinned apps in the policy.

    Teams Admin Center — Add Glean to pinned apps

  4. To make Glean more discoverable, use the Move up button to reorder Glean to the top of the pinned apps list.

    Teams Admin Center — Glean moved to the top of pinned apps

  5. Click Save.

tip

If your organization uses multiple setup policies for different user groups, repeat steps 1–5 for each policy that applies to users who should have Glean pinned.

Phase 3: Enable Glean in Microsoft Teams in the Glean Admin Console

Enter credentials in the Glean Admin Console

  1. Open the Glean Admin Console. In the left navigation, select Data sources, then select Microsoft Teams > Glean in Microsoft Teams.

  2. Enter the values collected during setup:

    FieldSource
    Application (client) IDCopied from Azure App Registration overview (Phase 1)
    Client secretGenerated from Azure Certificates & secrets (Phase 1)
    Glean in Microsoft Teams App IDCopied from Teams Admin Center (Phase 2)

Glean Admin Console — Glean in Microsoft Teams fields

  1. Click Save. Glean in Microsoft Teams is now enabled for your organization.

  2. Share the Glean in Microsoft Teams: User guide with your users so they can get started.

Troubleshooting

Bot installed but not responding (401 Authorization has been denied)

If the Glean bot is installed in Microsoft Teams and appears to be correctly configured, but replies from the bot fail with a 401 "Authorization has been denied" error (or similar) from Microsoft's Bot API, the issue is likely caused by an incorrect sign-in audience setting on the Azure app registration.

Symptoms

  • The Glean bot is installed in Microsoft Teams and visible to users.
  • The bot can receive user messages.
  • Graph API calls (such as fetching chat IDs) work correctly.
  • However, when the bot attempts to reply, the response fails with a 401 "Authorization has been denied for this request" error from the Bot Framework.

Cause

This error occurs when the Azure app registration used for the Glean Teams bot is configured as multi-tenant instead of single-tenant. The Bot Framework requires the app registration to use single-tenant authentication for proper authorization when sending replies.

Resolution

Follow the steps in Migrate the Teams bot to Azure Bot Service to switch the bot to single-tenant mode and resolve the authentication error. Allow up to 60 minutes for the change to propagate after completing the migration.