Power Platform Community Forum Thread Details

My copilot teams agent communicates with my backend API by calling an http flow within a Topic. All messages are funneled through this flow. I want to pass the user token into my backend but I am unable to access the User.AccessToken variable as it's not available when the agent authentication is set as 'Authenticate with Microsoft' (set by admin) [Add user authentication to topics]. For some more context, I've added the AAD application's client ID and resource URI to the agent's teams channel details already.

So my question is, how do I access the user token so that it can be passed onto my backend?

Categories:

Building Copilot Studio chatbots in Microsoft Teams

You cannot access the user’s token when the agent uses Authenticate with Microsoft. In this mode, Copilot Studio intentionally doesn’t expose User.AccessToken; configuring the AAD client ID and Resource URI on the Teams channel enables Teams SSO, but it doesn’t make the Teams token available to topics or flows.

To pass a token explicitly to your HTTP flow, you must change the authentication. Steps:

Change the agent authentication to Authenticate manually.
Configure Microsoft Entra ID V2 (preferably with federated credentials).
Configure the exposed API scope and Teams SSO/token-exchange settings.
Republish the agent.
Add a string input to the flow and pass User.AccessToken—shown as System.User.AccessToken in Power Fx contexts.
Send it to your API as "Authorization: Bearer <Token>".

Your backend must validate the token’s signature, issuer, audience and delegated scope.