I'm trying to create a phishing simulation that delivers its payload through Microsoft Teams in Microsoft Defender for Office 365. However, the Teams option in the simulation setup is disabled or doesn't respond when I click it. Attack Simulation Training is enabled on our Defender plan, and we already run regular simulations through the platform. Has anyone managed to get Teams-based simulations working, or is there an additional license, configuration, or prerequisite I'm missing?
3 Answers
The Teams option is tied to the Attack Simulation Training features and the licenses assigned to the users being targeted. Even if simulations work for email, Teams delivery may remain unavailable unless the relevant Defender licensing and Teams-related prerequisites are present. I’d verify the subscription, target-user licensing, and whether the simulation feature is enabled for the tenant.
It sounds like this may be a limitation of the custom simulation workflow rather than a simple browser issue. The Teams channel may only be available for supported simulation types and configurations. Check the Defender portal documentation for Teams simulation requirements, then try creating a basic supported simulation and confirm that your account has the necessary security administrator permissions.
I’d also test the portal with a supported browser, disable extensions, and confirm that the Teams app and Defender portals are using the same tenant. If the control is still visibly disabled after licensing and permissions are confirmed, it may be an unsupported feature or a tenant-side rollout issue rather than something you can fix in the simulation itself.
That makes sense. We’re already running simulations, but I’ll check whether the users and the custom payload type specifically meet the Teams requirements.