Skip to content
Onplana Docs

Deploy Onplana for Microsoft Teams

All plans Microsoft 365 / Teams admin

This guide is for the Microsoft 365 or Teams administrator deciding whether to allow Onplana, and how to roll it out. Onplana is an AI-native project and portfolio management app that runs inside Microsoft Teams and Microsoft 365 Copilot. It is free to install on every Onplana plan, and it signs users in with the Microsoft account they already use in Teams.

If you just want to use the app yourself, see Use Onplana in Microsoft Teams instead. This page covers the org-wide rollout.

What your users get

Section titled “What your users get”

Three personal tabs (Dashboard, Projects, Governance), the option to pin a project board or dashboard to any channel or chat, and an agent for Microsoft 365 Copilot that answers plain-language questions about their work. Everything is scoped to each person’s own Onplana permissions.

What the app needs

Section titled “What the app needs”

Onplana is built for least-privilege access.

  • Single sign-on only, by default. The Teams app authenticates through Microsoft Entra ID (Azure AD) single sign-on. Its manifest requests just the identity permission needed to sign the user in. There is nothing to provision and no password to manage.
  • Deeper Microsoft 365 integrations are optional and user-initiated. Connecting Outlook mail or calendar, SharePoint or OneDrive files, or posting to a Teams channel are separate features a user turns on from inside Onplana on the web, each behind its own standard OAuth consent. They are not part of the Teams app and are never required to use it. Your users can leave every one of them disconnected.

Review its security and compliance

Section titled “Review its security and compliance”

Before you allow the app, here is what admins usually want to confirm.

  • Publisher Attestation. Onplana has completed Microsoft’s Publisher Attestation, a self-assessment of its security, data handling, and compliance practices that Microsoft publishes so admins can evaluate the app. Look for Onplana on Microsoft’s Teams app security and compliance pages.
  • Hosting. Onplana runs on Microsoft Azure. Customer data is stored in the United States.
  • Encryption in transit. All traffic uses TLS 1.2 or higher.
  • Identity. Sign-in is delegated to Microsoft Entra ID. Onplana never sees a Microsoft password. Enterprise SSO (SAML or OIDC) orgs keep their own identity flow.
  • Privacy and GDPR. Onplana meets GDPR obligations, including the ability to delete or correct an individual’s personal data on request. See the privacy notice and terms of use.

Allow the app in the Teams admin center

Section titled “Allow the app in the Teams admin center”

If your organization allows third-party Teams apps by default, users can install Onplana themselves and you can skip this section. If you block them by default, allow Onplana once:

  1. Sign in to the Teams admin center as a Teams Administrator or Global Administrator.

  2. Go to Teams apps then Manage apps, and search for Onplana.

  3. Select Onplana and set its status to Allowed.

Choose who can use it

Section titled “Choose who can use it”

App permission policies control which users can install and use Onplana. You can allow it for everyone, or scope it to a pilot group first.

  1. In the Teams admin center, go to Teams apps then Permission policies.

  2. Edit the org-wide default policy, or create a custom policy and assign it to the users or group you want to start with.

  3. Make sure Onplana (or all third-party apps) is allowed in that policy, then save.

Pin it for your team

Section titled “Pin it for your team”

App setup policies decide which apps are pinned to the Teams app bar and in what order. Pinning Onplana makes it one click away and measurably lifts adoption.

  1. Go to Teams apps then Setup policies.

  2. Edit a policy, select Add apps, and add Onplana to the Pinned apps list. Drag it to the position you want.

  3. Save, and assign the policy to your users or groups.

Roll it out in phases

Section titled “Roll it out in phases”

You do not have to switch on the whole organization at once.

  • Start with a pilot group (a permission policy scoped to one team or department) to confirm the experience and gather feedback.
  • Share the user guide so people know what the tabs do and how to sign in.
  • Once the pilot is happy, widen the permission and setup policies to the rest of the organization and pin the app.

What runs in Teams versus the web

Section titled “What runs in Teams versus the web”

The Teams tabs focus on planning, tracking, and visibility, the things a team checks many times a day. Organization administration (settings, billing, integrations, imports) is done in Onplana on the web at app.onplana.com, and every tab has an Open in browser action that carries the session across. This is by design and keeps the Teams experience focused.

Troubleshooting

Section titled “Troubleshooting”

Users see “request approval” when they try to add Onplana. The app is blocked by your org’s default policy. Allow it as described above, or approve the pending requests in the Teams admin center under Teams apps then Manage apps.

A user signs in but sees no organization or an unexpected account. The Microsoft account they use in Teams must match an active Onplana account. On first launch the app walks a new user through connecting one; after that, sign-in is silent. Enterprise SSO orgs land in their normal identity flow.

The app is allowed but not visible yet. Teams admin center policy changes can take a few hours to propagate to all clients.

Getting support

Section titled “Getting support”

Support does not require a sign-in. Point admins and users to:

FAQs

Section titled “FAQs”

Does allowing the app give Onplana access to our mailboxes or files? No. The Teams app uses single sign-on only. Mail, calendar, SharePoint, and channel-posting integrations are optional, user-initiated, and each behind its own consent, so they only exist if a user turns them on.

Does the app cost extra? No. It is part of every Onplana plan, including Free. Each user’s plan determines the features they see, exactly as in the browser.

Do all our people need Onplana accounts? Yes. Each person signs in with their own Microsoft account and sees only their permitted view. Inviting someone is the same flow as on the web.

Can we customize the app’s name or icon for our tenant? Teams admin center app customization is not enabled for this app. It appears with its standard Onplana branding.

How do we track usage across our organization? Use the Teams admin center’s Teams app usage report under Analytics and reports. Onplana cannot see another organization’s usage data.

Section titled “Related”