Connector for Microsoft Teams

This documentation references external sources. Nexthink does not have control over the accuracy of third-party documentation, nor any external updates or changes that might create inconsistencies with the information presented on this page. Please report any errors or inconsistencies to Nexthink Support.

The connector for Microsoft Teams allows you to measure and view call quality data and use the Nexthink web interface to investigate, troubleshoot and remediate Zoom call issues for well-informed decisions when optimizing the digital employee experience (DEX).

Prerequisites

• Users are part of Microsoft Entra ID.

• Log in to Azure using a Microsoft Entra ID-joined device or use Active Directory synchronized with Microsoft Entra ID.

• You have enabled the connector for Entra ID for Microsoft Hybrid Entra joined devices. Refer to Connector for Microsoft Entra ID (Azure AD) for more information.

• You have a Collaboration Experience license from Nexthink.

Configuring the Azure application

Configure the application from the Azure page to retrieve call-quality data:

1. Sign in using your Azure credentials.

2. Register a new application.

   • During the registration process, select the Single tenant option.

3. For the Redirect URL, select Web.

   • If the application already exists in the Azure portal, you can reuse the application to assign the permissions to read the call records.

4. Register the application.

5. Access the API Permissions option from the left-side menu.

6. Add permission for Microsoft Graph.

   • Select CallRecords.Read.All and add the API permission. See the image below.

The Status column on the permissions list indicates if the Azure account you are using lacks proper privileges.

Refer to the Microsoft documentation for more information on the steps listed above.

7. Open the Overview section of the configured application to copy and save Azure AD credentials for future reference. That is, for the Nexthink connector configuration.

   • Application (client) ID

   • Directory (tenant) ID

8. Generate and copy the client secret Value in the Azure portal using the Certificates and secret option for future reference. That is, for the Nexthink connector configuration.

   • Click on New client secret.

   • Fill in the Description and Expiration values.

   • Click Add and copy the Value.

You need to update the client secret both in the Azure portal and for the Nexthink connector after the expiration date.

Configuring the connector in the Nexthink web interface

From the Nexthink web interface:

1. Select Administration > Inbound connectors from the main menu.

2. Select Microsoft Teams from the list of inbound connectors.

3. Enter the three Credentials gathered from the application configured in Azure. See steps 7 and 8 from above.

4. Save the MS teams inbound connector.

Known limitations

• The system cannot retrieve call-quality data for macOS devices that are not on-premises AD joined.

• Sometimes, the system does not link calls to the virtual machine because the Microsoft Teams connector identifies devices based on the MAC address, which is not always reliable for virtual machines.

FAQ

How does the system calculate the call quality?

The audio and video call quality classification is based on Microsoft’s definition of good versus poor.

Refer to the Microsoft Stream Classification in Call Quality Dashboard documentation.

Do I always need to use the connector for Microsoft Entra ID to obtain the call quality data?

Not necessarily. If all users only authenticate through Entra ID, the connector for Microsoft Entra ID is not needed.

You should enable the connector for Entra ID only for Hybrid Entra ID joined devices. For example, when some users authenticate against (on-premises) Entra ID.

What happens if a user receives a call on a device that doesn’t have Nexthink Collector installed?

Nexthink associates the call-quality data for users with at least one device running Collector on it. Therefore, when a user joins a Microsoft Teams call on a mobile device that does not have collector installed, the system reports the session details for the user but does not capture the device information.

How can I verify that I have properly configured the subscription?

From the Nexthink web interface, use the Test Credentials button on the connector page to validate the Azure Tenant ID, Azure Client ID, and Azure Client Secret values.

How often is the call-quality data refreshed? Is it instant?

The current mechanism uses a subscription to receive the data from Graph API.

Every time a call ends, the system pushes the call details to the Nexthink platform. The process is not instant, as the data typically arrives 5 to 10 minutes after the call ends.

Does Nexthink retrieve call-quality data for calls from a virtual machine?

This is a Known limitation, as sometimes, the system does not link calls to the virtual machine because the Microsoft Teams connector identifies devices based on the MAC address, which is not always reliable for virtual machines.