MS Teams - Adaptive cards

Hi ​@ORBR,

Great question — the behavior you’re seeing is expected. The MicrosoftTeams – Send Chat Message action in Google SecOps SOAR playbooks only accepts plain text. That’s why your Adaptive Card JSON renders as raw text instead of a visual card.

🔑 Current limitation

• Send Chat Message action → Designed for text payloads only.

• Adaptive Card JSON requires posting as an attachment with content type application/vnd.microsoft.card.adaptive via Microsoft Graph API.

🛠 Options to achieve Adaptive Card rendering

1. Extend integration via Python

   • Use the Microsoft Graph API chatMessage endpoint.

   • Payload must include attachments array with contentType: application/vnd.microsoft.card.adaptive and your card JSON under content.

2. Custom connector

   • Wrap the Graph API call in a Python script or custom SecOps connector.

   • Example snippet outline:

     python

     import requests
     
     url = f"https://graph.microsoft.com/v1.0/chats/{chat_id}/messages"
     headers = {
         "Authorization": f"Bearer {token}",
         "Content-Type": "application/json"
     }
     payload = {
         "attachments": [
             {
                 "contentType": "application/vnd.microsoft.card.adaptive",
                 "content": adaptive_card_json
             }
         ]
     }
     response = requests.post(url, headers=headers, json=payload)
     print(response.json())
     

   • Replace chat_id, token, and adaptive_card_json with your values.

3. Future integration request

   • At present, the native Teams action in SecOps doesn’t support Adaptive Cards. Submitting feedback to Google SecOps product team is recommended.

👉 In short: Adaptive Cards cannot be sent through the existing Send Chat Message action. You’ll need to either extend the integration with a Python script calling Microsoft Graph API, or wait for native support.

Kind regards