Teams

The Microsoft Teams plugin for Login AlertX posts a formatted alert card to a Teams channel every time a monitored event is detected — logins, failed attempts, remote access, session locks, and more.

What You Need

• An active Premium license
• Access to a Microsoft Teams workspace (personal or organisation)
• Permission to add connectors to a Teams channel
• The Login AlertX Teams plugin installed (bundled with Login AlertX)

Step 1: Add an Incoming Webhook Connector to a Teams Channel

1. Open Microsoft Teams and navigate to the channel you want to receive alerts in.
2. Click the ··· (More options) button next to the channel name.
3. Select Connectors (or Manage channel → Connectors on newer Teams versions).
4. Search for Incoming Webhook and click Add → Add again to confirm.
5. Give the webhook a name (e.g. Login AlertX) and optionally upload an icon.
6. Click Create.
7. Copy the generated Webhook URL that appears. Click Done.

⚠️ Note: The Connectors feature may be restricted by your organisation’s IT administrator. If you cannot see the Connectors option, contact your Teams admin to enable it for your channel.

Step 2: Configure the Plugin in Login AlertX

1. Open Login AlertX from the system tray.
2. Navigate to the Plugins tab.
3. Locate Microsoft Teams Notification Plugin and click it to open its settings.
4. Paste the Webhook URL you copied into the Webhook URL field.
5. Click Save.

Step 3: Test the Connection

1. With the Teams plugin settings open, click Test Connection.
2. Login AlertX will send a test alert to your Teams channel.
3. Check the channel — a test message card should appear within a few seconds.

What a Teams Alert Looks Like

Each Teams alert card includes:

• The event type (Login, Failed Login, Lock, Remote Connect, etc.)
• The Windows account name that triggered the event
• The date and time of the event
• The public IP address at the time
• The anomaly score if applicable

Tips & Troubleshooting

• If the test fails with a 400 Bad Request error, ensure the webhook URL was copied in full and is still active in your Teams channel settings.
• Webhooks in Teams are tied to a specific channel. If the channel is deleted, the webhook stops working — create a new one and update Login AlertX.
• Teams webhooks require an active internet connection. Alerts generated while offline are retried automatically when connectivity is restored.
• You can run the Teams plugin alongside email, Slack, push, and other plugins simultaneously.

Next Steps

• Set up Slack Alerts
• Set up Google Chat Alerts
• Set up Telegram Alerts