Error when send activity feed notification and teams app validation

Question

Error when send activity feed notification and teams app validation

Rich 20

I have two accounts, one is for Azure which created the MS Entra App with permission "TeamsActivity.Send" which License is "Microsoft Entra ID Free". And The app support account type is "Multiple organizations".

User's image

Another is for MS 365 account with teams license which belonged to an Org.

I registered an teams app on https://dev.teams.microsoft.com/, and bound the teams app with the Application (client) ID which created on Azure. Then I uploaded it to my teams org.

User's image

I have two questions:

About for teams app validation:
1. I got an error after validation as following screenshot shows: AzureAppId:'xxxxxxxxx-xxxx-xxxxx-5bfcc' should be registered as Multi-Tenant'. Actually, the Azure app is definitely Multii-Tenant. Why this error ? Should I register the Azure account with Teams account info ?
About for teams activity feed notification: I have consented the Application type API permissions on Azure. Then I request the token by calling POST https://login.microsoftonline.com/{tenant-id}/oauth2/v2.0/token with body: --data-urlencode 'grant_type=client_credentials'
--data-urlencode 'client_id=xxxxxxxxxxxxxxxxx'
--data-urlencode 'client_secret=xxxxxxxxxxxxxxxx'
--data-urlencode 'scope=https://graph.microsoft.com/.default Then I called send notification API, POST https://graph.microsoft.com/v1.0/users/{user-object-id}/teamwork/sendActivityNotification an error returned: "message": "Microsoft Teams hasn't been provisioned on the tenant. Ensure the tenant has a valid Office365 subscription.", Does the Azure account have to subscribe to the MS 365 license ?

1 answer

Your answer

Answer 1

Kudos-Ng 14,515 Microsoft External Staff Moderator

Hi Rich,

Thank you for posting your question in the Microsoft Q&A forum.

Could you please confirm whether the two accounts you mentioned (the Azure/Entra account used to create the app registration, and the Microsoft 365 account used in your Teams org) are in the same tenant (same directory), or in different tenants/directories?

If the accounts are in different tenants (cross-tenant scenario), your concerns could potentially be explained as follows:

Concern 1: App validation/upload across tenants & admin consent / service principal

If you are uploading and validating the Teams app in Tenant B, but the Microsoft Entra app registration was created in Tenant A, then Tenant B must have a corresponding service principal for that multi-tenant application. In practice, this usually requires admin consent (in the Teams tenant) so the app is “known” in the tenant where you are validating and installing the Teams app. Otherwise, validation and other checks can behave as if the app is not properly configured for the target tenant.

Concern 2: “Microsoft Teams hasn’t been provisioned on the tenant” indicates tenant subscription / Teams enablement

The Graph error message you received explicitly states: “Microsoft Teams hasn’t been provisioned on the tenant. Ensure the tenant has a valid Office365 subscription.” This generally points to the fact that the tenant context used for testing (i.e., the tenant that issued your access token) must have a valid Microsoft 365 subscription that have Microsoft Teams enabled; otherwise, the tenant can effectively be treated as “not using Teams,” which can lead to the provisioning-related error you’re seeing.

Looking forward your update on this issue.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Sayali-MSFT 5,191 Reputation points Microsoft External Staff Moderator

2026-02-26T12:32:06.4333333+00:00

Hi **Rich,
**Could you please confirm if your issue has resolved with provided suggestions or still looking for any help?
Rich 20 Reputation points

2026-02-27T02:00:23.61+00:00

Hi, thanks for your reply, now I understood Concer 1 clearly.

About Concer 2, if I want to send activity feed notification from Tenant A Entra app to Tenant B Teams account through the Teams app which installed by Tenant B org and bound to Tenant A application after Tenant B Teams Admin Consent. Tenant A Entra app has the permission:

And Tenant A doesn't have the Office365 Teams subscription, can't I implement it ?

What other necessary conditions are required?

Another scenario is, if I use Azure account which is belonged to Tenant B, and created an Entra app, can I send activity notification successfully ?

One more scenario, the teams app installed by Tenant C after admin consent, could I use Tenant B Entra app which has Teams subscription to send activity notification to Tenant C Teams user ?

please share your opnions, thanks a lot.
Kudos-Ng 14,515 Reputation points Microsoft External Staff Moderator

2026-02-27T10:50:42.5533333+00:00

Hi Rich,

Regarding Concern 2, Microsoft Graph’s activity feed notification APIs work only when the Teams app is installed for the recipient (installed personally, or in a team/chat the recipient is part of). In other words, the target tenant where the recipients/users exist must be able to install/use the Teams app in the relevant scope.

So the tenant that needs Microsoft 365/Teams provisioning is the tenant you are targeting (where the recipients are and where the Teams app must be installed). And therefore, if Tenant A is only hosting the app registration and you are not installing/using the Teams app for recipients in Tenant A, the Teams subscription/provisioning requirement is driven by the target (recipient) tenant rather than Tenant A.

Reference: https://learn.microsoft.com/en-us/graph/teams-send-activityfeednotifications?tabs=desktop%2Chttp#requirements-for-using-the-activity-feed-notification-apis
Kudos-Ng 14,515 Reputation points Microsoft External Staff Moderator

2026-03-02T14:51:03.37+00:00

Hi Rich,

Just checking in to see if you had a chance to review the previous response.

Your feedback would be very helpful in ensuring everything is on track.
Rich 20 Reputation points

2026-03-05T01:00:56.3966667+00:00

Hi, Concern 2 is based on Concern 1, So about Concern 1, I request the Teams Admin to Admin Consent which API is https://login.microsoftonline.com/{tenant-id}/adminconsent?client_id=anotherTenantAppClientId, An new error happened as screenshot shows:

I'll supply more info about the another tenant MS Entra App:

I just use the app to be an notification APP, don't want to own user ID token. So I left redirect url empty. Should I must define the app redirect url ? how to test quickly for current situation ?
Kudos-Ng 14,515 Reputation points Microsoft External Staff Moderator

2026-03-05T15:01:13.5766667+00:00

Hi Rich,

Thank you for following up and letting me know about this issue. I’ve noted the new problem and will need a bit more time to review the documentation and perform some testing.

Thank you for your patience.

Rich 20

I'll paste my Teams app manifest.json FYI.

{
  "$schema": "https://developer.microsoft.com/en-us/json-schemas/teams/v1.24/MicrosoftTeams.schema.json",
  "version": "1.0.0",
  "manifestVersion": "1.24",
  "id": "myId",
  "name": {
    "short": "Test notification bot"
  },
  "developer": {
    "name": "Test",
    "websiteUrl": "myhomepage",
    "privacyUrl": "myhomepage/privacy",
    "termsOfUseUrl": "myhomepage/terms"
  },
  "description": {
    "short": "Send notifications",
    "full": "This bot allows Azure Web Application to send activity notifications to Teams users."
  },
  "icons": {
    "outline": "outline.png",
    "color": "color.png"
  },
  "accentColor": "#ffffff",
  "validDomains": [],
  "webApplicationInfo": {
    "id": "anotherTenatAppId",
    "resource": "api://anotherTenatAppId"
  },
  "authorization": {
    "permissions": {
      "resourceSpecific": [
        {
          "name": "TeamsActivity.Send.User",
          "type": "Application"
        }
      ]
    }
  }
}

Kudos-Ng 14,515 Reputation points Microsoft External Staff Moderator

2026-03-06T11:45:55.0733333+00:00
Hi Rich,

Following up on your scenario, I've run some tests and wanted to offer an alternative way to grant Admin Consent for your multi-tenant app across different target organizations.

Since your app acts purely as a backend service/notification daemon and doesn’t have a web frontend, you shouldn't be forced to configure dummy Redirect URIs just to satisfy the browser-based /adminconsent endpoint (which triggers the AADSTS500113 error you encountered).

Instead, you can programmatically create the Service Principal in the target tenant and then grant the permissions directly via the Entra ID UI. Here is the step-by-step workaround:

Step 1: Install the Module and Create the Service Principal via PowerShell

Have an administrator of the target tenant open PowerShell and run the following commands using your App's Client ID (App ID):

First, ensure the Microsoft Graph SDK is installed:

Install-Module -Name Microsoft.Graph -Scope CurrentUser -Force

Then, authenticate and create the Service Principal:

Connect-MgGraph -Scopes "Application.ReadWrite.All" New-MgServicePrincipal -AppId "<Your-Multi-Tenant-App-Client-ID>"

Step 2: Grant Admin Consent in the target tenant's Entra portal

Once the Service Principal is created, the target tenant administrator needs to explicitly consent to the TeamsActivity.Send permission:

Go to the Microsoft Entra admin center (entra.microsoft.com).

Navigate to Identity > Applications > Enterprise applications > All applications.

CRITICAL STEP: By default, the portal filters the list to show only "Application Type == Enterprise Applications". Because you added a raw Service Principal, you must clear this filter (remove all filters) to make your app appear in the search results.

Search for your application and click on it.

On the left menu, under Security, select Permissions.

Click the "Grant admin consent for [Tenant Name]" button.

This method completely bypasses the need for Redirect URIs and interactive endpoints, while ensuring your backend tool has the exact tenant-wide consent required to send Teams activity feeds.

Let the community know if this alternative approach successfully unblocks your development.
Rich 20 Reputation points

2026-03-09T01:57:51.09+00:00

thanks for your detail workaround, I'll try it and share result with you
Kudos-Ng 14,515 Reputation points Microsoft External Staff Moderator

2026-03-09T07:19:24.9033333+00:00

Hi Rich,

Thanks for letting me know. I look forward to your updates.

Share via

Error when send activity feed notification and teams app validation

1 answer

Your answer