Skip to content

Commit cd6c79a

Browse files
rrajpcursoragent
rrajp
and
cursoragent
committed
IDR-msteams-aad-sender-identity: docs(msteams): regenerate config metadata and document senderIdentity
- Regenerate bundled-channel-config-metadata.generated.ts to include senderIdentity schema and UI hints - Add Sender identity enrichment section to Teams docs with config, permissions (User.Read.All), privacy notes, and cloud limitation - Cross-reference sender identity from Graph capabilities section Co-authored-by: Cursor <[email protected]>
1 parent 3f84afa commit cd6c79a

2 files changed

Lines changed: 43 additions & 9 deletions

File tree

‎docs/channels/msteams.md‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -489,6 +489,39 @@ Requirements:
489489

490490
The action is gated by `channels.msteams.actions.memberInfo` (default: enabled when Graph credentials are available).
491491

492+
## Sender identity enrichment
493+
494+
When `channels.msteams.senderIdentity.enabled` is set to `true`, OpenClaw fetches the sender's Azure AD profile from Microsoft Graph on each inbound message and passes it as untrusted structured metadata to the agent. This gives agents access to display name, email, department, and job title for persona-aware routing and responses.
495+
496+
The profile data is delivered through the same `UntrustedStructuredContext` path used by other channels (Discord channel metadata, WhatsApp contacts) and is not treated as trusted prompt authority.
497+
498+
**Requirements:**
499+
500+
- `User.Read.All` Microsoft Graph **Application** permission with admin consent
501+
- Not supported when `channels.msteams.cloud` is set to `China`
502+
503+
**Configuration:**
504+
505+
```json
506+
{
507+
"channels": {
508+
"msteams": {
509+
"senderIdentity": {
510+
"enabled": true,
511+
"cacheTtlMs": 3600000
512+
}
513+
}
514+
}
515+
}
516+
```
517+
518+
| Key | Type | Default | Description |
519+
| --------------------------- | ------- | ------------------ | --------------------------------------- |
520+
| `senderIdentity.enabled` | boolean | `false` | Enable AAD sender identity enrichment |
521+
| `senderIdentity.cacheTtlMs` | integer | `3600000` (1 hour) | In-process profile cache TTL per tenant |
522+
523+
**Privacy:** Profile fields are passed as untrusted metadata and are not logged at runtime. Operators should review their organization's data handling policies before enabling this feature.
524+
492525
## History context
493526

494527
- `channels.msteams.historyLimit` controls how many recent channel/group messages are wrapped into the prompt.
@@ -629,6 +662,7 @@ Adds:
629662
- Downloading hosted contents (images pasted into messages).
630663
- Downloading file attachments stored in SharePoint/OneDrive.
631664
- Reading channel/chat message history via Graph.
665+
- [Sender identity enrichment](#sender-identity-enrichment) (`User.Read.All`).
632666

633667
### RSC vs Graph API
634668

0 commit comments

Comments
 (0)