securing webhooks

[Tarmo Tormilind]

Hi Community!

We implemented sending Webhooks from Jira Data Center to MS Teams, one-way communication. 

https://success.atlassian.com/solution-resources/work-management/wm-topics/integration-with-microsoft-teams

But for security it is not viable solution as not any authentication takes place. After reading all the materials we can't find any option to add security for to avoid attack MS teams end point from unknown webhook sources.

Can you advise please if and what could be the options to add security?

/Tarmo

[Britta Neugebauer _yasoon_]

Hi there @Tarmo Tormilind ,

thank you for your question! I work for yasoon, the company developing Microsoft 365 for Jira (available for DC). The app offers a lot more than one-way communication to Microsoft Teams, and might be a secure alternative for you. Here's a feature overview incl. documentation. If you're willing to work with a third party app with a paid plan, you can check out the listing. 

In addition, here's a video on Youtube how to enhance Jira automation with Microsoft 365 features.

If you have more questions about security details, you can also check our docs or book a meeting with our team here.

Best,

Britta

[Tarmo Tormilind]

Hi @Britta Neugebauer _yasoon_ 

Thank you for reaching out here. We would be mostly interested via which measures you perform the webhooks authentication in the direction from Jira to O365 (Teams). I could not find such security related information from your documents.

Regards,

Tarmo

[Britta Neugebauer _yasoon_]

Hi @Tarmo Tormilind , 

sure, no prob! I'd recommend to book a support meeting with tech support, so we can give you all needed information. 

Happy Friday,

Britta