--- title: Microsoft Teams (Workflow) summary: null url: https://www.fastly.com/documentation/guides/next-gen-waf/integrations/teams --- Our Microsoft Teams (Workflow) integration (alert) allows you to be notified when certain Next-Gen WAF activity occurs. > **HINT:** > > Want to set up alerting for your CDN or Compute service? Check out our [Observability](/guides/observability/alerts/about-alerts/) guides. > > > ## Alerting on corp activity > **IMPORTANT:** This feature is only available to Next-Gen WAF customers with access to the [Next-Gen WAF control panel](https://dashboard.signalsciences.net). To add a Teams integration that notifies you when corp actions occur, complete the following steps: > **IMPORTANT:** Only [Owners](https://www.fastly.com/documentation/guides/next-gen-waf/account-info/using-user-roles-and-permissions/) can create corp-level integrations. 1. In Microsoft Teams, add a [custom incoming webhook](https://support.microsoft.com/en-us/office/create-incoming-webhooks-with-workflows-for-microsoft-teams-8ae491c7-0394-4861-ba59-055e33f75498) 2. Copy the **Webhook URL** of the new webhook. 3. Log in to the [Next-Gen WAF control panel](https://dashboard.signalsciences.net). 4. From the **Corp Manage** menu, select **Corp Integrations**. 5. Click **Add corp integration**. 6. Select the **Microsoft Teams (Workflow)** integration. 7. In the **Webhook URL** field, enter the **Webhook URL** created in Microsoft Teams. 8. Select if you want to be alerted regarding **All activity** or **Specific activity**. If you selected **Specific activity**, then in the **Activity** menu choose the activity types that you want the integration to create alerts for. 9. Click **Create corp integration**. ## Alerting on site (workspace) activity To add a Teams integration (alert) that applies to a single site (workspace), complete the following steps: ### Next Gen Waf Control Panel 1. In Microsoft Teams, add a [custom incoming webhook](https://support.microsoft.com/en-us/office/create-incoming-webhooks-with-workflows-for-microsoft-teams-8ae491c7-0394-4861-ba59-055e33f75498) 2. Copy the **Webhook URL** of the new webhook. 3. Log in to the [Next-Gen WAF control panel](https://dashboard.signalsciences.net). 4. From the **Sites** menu, select a site if you have more than one site. 5. From the **Manage** menu, select **Site Integrations**. 6. Click **Add site integration**. 7. Select the **Microsoft Teams (Workflow)** integration. 8. In the **Webhook URL** field, enter the **Webhook URL** created in Microsoft Teams. 9. Select if you want to be alerted regarding **All activity** or **Specific activity**. If you selected **Specific activity**, then in the **Activity** menu choose the activity types that you want the integration to create alerts for. 10. Click **Create site integration**. ### Fastly Control Panel 1. In Microsoft Teams, add a [custom incoming webhook](https://support.microsoft.com/en-us/office/create-incoming-webhooks-with-workflows-for-microsoft-teams-8ae491c7-0394-4861-ba59-055e33f75498) 2. Copy the **Webhook URL** of the new webhook. 3. Log in to the [Fastly control panel](https://manage.fastly.com). 4. Go to **Security** > **Next-Gen WAF** > [**Workspaces**](https://manage.fastly.com/security/ngwaf/workspaces). 5. Click the gear Gear icon next to the workspace that you want to modify. 6. Click **Alerts** and then **Add alert**. 7. Fill out the **Add alert** form as follows: - From the **Integration type** menu, select **Microsoft Teams**. - In the **Webhook URL** field, enter the **Webhook URL** created in Microsoft Teams. - In the **Select activities** menu, leave **Flagged IPs** checked. 8. Click **Add workspace alert**. ## Activity types > **IMPORTANT:** This section only applies to Next-Gen WAF customers with access to the [Next-Gen WAF control panel](https://dashboard.signalsciences.net). When setting up a Teams integration in the Next-Gen WAF control panel, you can select the type of activity that you want to be notified about. ### Corp integration The following activity types are available for the Team integration at the corp-level: | Activity type | Description | | ----------------------------- | ------------------------------------------ | | `releaseCreated` | New release notifications | | `featureAnnouncement` | New feature announcements | | `corpUpdated` | Account timeout setting updated | | `newSite` | A new site (workspace) was created | | `deleteSite` | A site (workspace) was deleted | | `enableSSO` | SSO was enabled for the corp (account) | | `disableSSO` | SSO was disabled for the corp (account) | | `corpUserInvited` | A user was invited | | `corpUserReinvited` | A user was reinvited | | `listCreated` | A list was created | | `listUpdated` | A list was updated | | `listDeleted` | A list was removed | | `customTagCreated` | A custom signal created | | `customTagDeleted` | A custom signal updated | | `customTagUpdated` | A custom signal removed | | `userAddedToCorp` | A user was added to the corp (account) | | `userMultiFactorAuthEnabled` | A user enabled 2FA | | `userMultiFactorAuthDisabled` | A user disabled 2FA | | `userMultiFactorAuthUpdated` | A user updated 2FA secret | | `userRegistered` | A user was registered | | `userRemovedCorp` | A user was removed from the corp (account) | | `userUpdated` | A user was updated | | `userUndeliverable` | A user's email address bounced | | `userUpdatePassword` | A user updated their password | | `accessTokenCreated` | An API Access Token was created | | `accessTokenDeleted` | An API Access Token was deleted | ### Site integration The following activity types are available for the Team integration at the site-level: | Activity type | Description | | ------------------------------ | -------------------------------------------------------------- | | `siteDisplayNameChanged` | The display name of a site (workspace) was changed | | `siteNameChanged` | The short name of a site (workspace) was changed | | `loggingModeChanged` | The agent mode ("Blocking", "Not Blocking", "Off") was changed | | `agentAnonModeChanged` | The agent IP anonymization mode was changed | | `flag` | An IP address was flagged | | `expireFlag` | An IP address flag was manually expired | | `createCustomRedaction` | A custom redaction was created | | `removeCustomRedaction` | A custom redaction was removed | | `updateCustomRedaction` | A custom redaction was updated | | `customTagCreated` | A custom signal was created | | `customTagUpdated` | A custom signal was updated | | `customTagDeleted` | A custom signal was removed | | `customAlertCreated` | A custom alert was created | | `customAlertUpdated` | A custom alert was updated | | `customAlertDeleted` | A custom alert was removed | | `detectionCreated` | A templated rule was created | | `detectionUpdated` | A templated rule was updated | | `detectionDeleted` | A templated rule was removed | | `listCreated` | A list was created | | `listUpdated` | A list was updated | | `listDeleted` | A list was removed | | `ruleCreated` | A request rule was created | | `ruleUpdated` | A request rule was updated | | `ruleDeleted` | A request rule was deleted | | `customDashboardCreated` | A custom dashboard was created | | `customDashboardUpdated` | A custom dashboard was updated | | `customDashboardReset` | A custom dashboard was reset | | `customDashboardDeleted` | A custom dashboard was removed | | `customDashboardWidgetCreated` | A custom dashboard card was created | | `customDashboardWidgetUpdated` | A custom dashboard card was updated | | `customDashboardWidgetDeleted` | A custom dashboard card was removed | | `agentAlert` | An agent alert was triggered | ## Related content - [Webhooks](https://www.fastly.com/documentation/guides/next-gen-waf/integrations/generic-webhooks) - [Using an API with the Next-Gen WAF](https://www.fastly.com/documentation/guides/next-gen-waf/developer/using-an-api-with-the-next-gen-waf)