DMT IT Help agent

Setup in Entra and Teams5 of 5 done

• ✓
  Step 1: app registration, groups and Graph identity createdIDs reached newt.asia Sat 10 Oct 11:50 (26 days ago)
• ✓
  newt.asia can sign in to Microsoft Graph with its certificateCertificate accepted; can read users and reset passwords (checked today 03:25 (4 min ago))
• ✓
  Steps 2-3: SSO registered in the Teams Developer Portal, Application ID URI on newt.asiaReached newt.asia Sat 10 Oct 11:54 (26 days ago)
• ✓
  Developer Portal SSO scope set to <Application ID URI>/access_as_userCopilot sign-ins carry the scope
• ✓
  Step 3b: agent published and available to the three groupsCopilot first reached newt.asia Sat 10 Oct 15:03 (26 days ago)

Testing in Copilot5 of 5 done

• ✓
  Signed-in Copilot user reached the Password reset serverFirst Sat 10 Oct 15:03 (26 days ago), last Wed 21 Oct 18:58 (15 days ago)
• ✓
  Signed-in Copilot user reached the ServiceNow serverFirst Sat 10 Oct 15:03 (26 days ago), last Wed 21 Oct 18:58 (15 days ago)
• ✓
  Password reset worked end to endFirst Sat 10 Oct 15:03 (26 days ago)
• ✓
  Password reset recorded as a ServiceNow ticketFirst Wed 21 Oct 11:49 (15 days ago)
• ✓
  Ticket created, updated or commented on from CopilotFirst Sun 11 Oct 10:35 (25 days ago)

ServiceNow integration account

• ✕
  Integration account signs inUsername or password rejected (checked today 03:25 (4 min ago))

Servers on newt.asia

• ✓
  Both servers running and healthy
• ✓
  Running the latest main commit (9de6cb9)Deployed Wed 21 Oct 16:06 (15 days ago)
• i
  Last change on GitHubWed 21 Oct 16:03 (15 days ago); 0 commits in the last 24 hours

Problems seen in the last 7 days

• ✓
  None

Activity in the last 7 days

• i
  Signed-in requestsPassword reset 0, ServiceNow 0
• i
  Password resets0
• i
  ServiceNow ticket changes0

Not visible from newt.asia

• The Graph identity's User Administrator role on the administrative unit, and who is in that unit
• Who is in the three groups
• The agent's availability in the Teams admin center (until someone uses it)
• Whether ServiceNow users' e-mail addresses match their Microsoft 365 sign-in names

admin/dmt/4-verify.sh checks the Entra items.

Endpoints (for Microsoft 365 Copilot, not browsers)

• i
  /password-reset/mcphealth: /password-reset/healthz
• i
  /servicenow/mcphealth: /servicenow/healthz

The /mcp endpoints accept only POST requests carrying a Copilot sign-in token.