CHATBOTS

Teams IT Bot: Self-Service MFA Lockout Recovery

A locked-out user messages the Teams bot, which step-up verifies them, resets their MFA enrollment, and escalates to a ClickUp ticket if verification fails.

CategoryChatbots
Enginepaperclip
Difficultyadvanced
Triggerchat
Steps6
Setup~25 min

How it runs

The automated pipeline, trigger to output.

  • TriggerUser reports MFA lockout in TeamsMicrosoft Teams
  • ActionSend one-time code to verified backup emailOutlook
  • LogicVerify the echoed code matches
  • ActionReset MFA enrollment via identity providerHTTP webhook
  • ActionEscalate to ClickUp ticket on failureClickUpClickUp
  • OutputConfirm reset and next steps in TeamsMicrosoft Teams

What it does

Handles the most common after-hours IT call entirely in chat. When a user reports they're locked out of MFA, the bot runs a step-up verification (one-time code to a verified backup channel), and on success resets their MFA enrollment so they can re-register a device.

When to use it

Use it to eliminate help-desk wait time for MFA lockouts while keeping a strong verification gate. Best for organizations that maintain a verified backup contact method per employee.

How it works

  1. 1A user messages the bot in Teams reporting an MFA lockout.
  2. 2The bot sends a one-time verification code to the user's pre-registered backup email.
  3. 3A logic branch checks whether the user echoes the correct code in the thread.
  4. 4On success, the bot calls the identity provider API to reset the user's MFA enrollment.
  5. 5On failure or timeout, it opens a ClickUp ticket for a human agent.
  6. 6The bot confirms the reset and next steps in the Teams thread.

Set it up

What you configure once, before turning it on.

  1. 1
    Connect Microsoft TeamsChannels, chats, files.
  2. 2
    Connect OutlookMail, calendar, contacts.
  3. 3
    Connect ClickUpDocs + tasks + chats in one workspace.
  4. 4
    Connect HTTP webhookTrigger any URL on agent actions.
  5. 5
    Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
  6. 6
    Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
  7. 7
    Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.

Run this workflow in your colony.

14-day trial. No DevOps. No Sales call. Provisioned in under a minute.