Authentication

teams uses Microsoft's MSAL (Microsoft Authentication Library) to authenticate with Microsoft 365. This page explains how auth works and what tokens are used.

Login

teams login

This opens your default browser to sign in with your Microsoft 365 account. If you're on a headless machine (CI, SSH, container), use the device code flow instead:

teams login --device-code

You'll get a code and URL — open the URL on any device, enter the code, and complete sign-in.

Your session is cached locally and persists across CLI invocations. You don't need to log in every time.

Logout

teams logout

Clears your cached session.

Check Status

teams status

Shows your current login state, including your username and tenant. With -v, also shows tenant ID and home account ID.

teams status -v

Azure CLI Auth

Some operations (Azure bots, OAuth connections, SSO setup) require the Azure CLI. These use your separate Azure CLI login — run az login before using these features.

The teams status command shows both your M365 login state and your Azure CLI connection status.