Configure SharePoint credentials for your Workspace

Benefits:

• Full control over your organization's OAuth credentials

• Better compliance and data security

• Support for tenant-specific authentication (optional)

• Easy to configure and modify

• Isolated configuration per workspace

What You'll Learn

By the end of this guide, you will have:

1. Created an Azure AD application in your tenant

2. Configured OAuth 2.0 credentials

3. Set up the appropriate SharePoint API permissions

4. Optionally configured tenant-specific authentication

5. Saved these credentials in your workspace

6. Connected SharePoint document libraries to your applications

Step 1: Access Azure Portal and Prepare

1.1 Access Azure Portal

1. Go to Azure Portal

2. Sign in with your organization's Azure administrator account

3. Verify you have access to Azure Active Directory (now called Microsoft Entra ID)

1.2 Verify or Create Azure AD Tenant

1. In the Azure Portal, search for "Azure Active Directory" or "Microsoft Entra ID"

2. Click on it to access your tenant

3. Note your Tenant ID (you'll need this later):

   • Go to Overview

   • Look for "Tenant ID" field

   • Copy and save this value (format: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx)

? Step 2: Create an App Registration

2.1 Create new app registration

1. In Azure Portal, go to Azure Active Directory or App registrations

2. Click "+ New registration" at the top

3. Fill in the details:

4. Click "Register"

2.2 Obtain Application (Client) ID

After registration, you'll see the app overview page:

1. Copy the "Application (client) ID" value

2. Save this securely ? this is your Client ID

2.3 Add Redirect URI (Optional but Recommended)

1. In the left sidebar of your app, go to Authentication

2. Under "Redirect URIs", click "Add a redirect URI"

3. Click "Add URI"

4. Enter the callback URL:

   https://graphql.swiftask.ai/app/integrations/connect
   

5. Click "Save"

Important: Use exactly the URL shown above. This is the standard callback endpoint for SharePoint OAuth authentication.

Step 3: Configure API Permissions

3.1 Add permissions

1. In your app, go to API permissions (in the left sidebar)

2. Click "+ Add a permission"

3.2 Select Microsoft Graph API

1. Select "Microsoft Graph" from the list

2. Choose "Application permissions" (not "Delegated permissions")

3.3 Add required permissions

Search for and select the following permissions (in Application type):

For each permission:

1. Search for it in the search box

2. Check the checkbox

3. Click "Add permissions"

Note: Some scopes like offline_access and openid may be granted automatically or may appear as "delegated" permissions. The important application permissions are the five listed above.

3.4 Grant admin consent

Important: These are application permissions that require admin consent.

1. After adding all permissions, click "Grant admin consent for [Tenant Name]"

2. Click "Yes" to confirm

3. Wait for the status to change to "Granted" (green checkmark)

? Step 4: Create Client Secret

4.1 Create new client secret

1. In your app, go to "Certificates & secrets" (in the left sidebar)

2. Click the "Client secrets" tab

3. Click "+ New client secret"

4.2 Configure the secret

1. In the dialog:

   • Description: Enter SharePoint Sync - Production or similar

   • Expires: Select "24 months" (or your preferred expiration)

2. Click "Add"

4.3 Copy the secret value

IMPORTANT:

• Copy the "Value" column (NOT the Secret ID)

• This is your Client Secret

• The secret will only be visible once ? if you close this page without copying, you'll need to create a new one

• Store it securely and don't share it with anyone

Step 5: Gather Your Credentials

Before proceeding to workspace configuration, ensure you have:

Keep these three values secure and accessible for the next step.

Step 6: Configuration in Your Workspace

6.1 Access Workspace Administration

1. Log in to your application

2. From the main menu or settings, go to Workspace Settings

3. Look for "OAuth Authentication" or "External Integrations" tab

4. Verify you have admin permissions (required)

6.2 Find SharePoint Configuration

1. You'll see a list of available external applications

2. Find "SharePoint" in the list

3. Click the "Configure" button next to it

4. A configuration dialog will open

6.3 Enter Credentials

In the form that appears, you'll see the following fields:

About the Tenant ID field:

• Recommended: Always fill in your Tenant ID for better security and compliance

• Optional: Leave empty to use Microsoft's common endpoint (supports all tenants)

• Security: Using your specific Tenant ID restricts authentication to your organization only

6.4 Verify the values

Before saving, ensure:

• ? All values are copied without extra spaces

• ? Client Secret is the "Value" field (not the Secret ID)

• ? Tenant ID is in the correct format if provided

6.5 Save Configuration

1. Click "Save Credentials"

2. A confirmation message will appear: "OAuth credentials configured successfully"

3. SharePoint will now show a "Configured" or "?" indicator

Security:

• Sensitive data (Client Secret and Tenant ID) are automatically encrypted in the database

• No one else in the workspace can see the Secret

• Credentials are workspace-isolated

Step 7: Verification and Testing

7.1 Verify configuration

1. Return to Workspace Settings ? "OAuth Authentication"

2. SharePoint should show a "? Configured" status or "Configured" indicator

7.2 Test the SharePoint connection in Knowledge Base

This is the main user-facing test:

1. Go to your Knowledge Base (or data sources section)

2. Look for an "Import" button or option

3. Click "Import from SharePoint" or similar option

7.3 Connection Information Display

When you click "Add Account", you'll see:

• Account selection (if multiple accounts connected)

• Add Another Account button - To connect additional SharePoint accounts

• Manage Workspace OAuth link - Goes to workspace settings

7.4 Browse and verify access

The SharePoint explorer should display:

1. Root site from your tenant

2. Followed sites you've bookmarked

3. Sites from groups you're a member of

4. Sites from Teams you participate in

5. Shared content accessible to you

6. Recent items you've accessed

7. Subsites at the first level

8. Expand a site and verify you can see document libraries

9. Look for document libraries you expect to see (e.g., "Shared Documents", "Project Files", etc.)

7.5 Import files into Knowledge Base

Once verified:

• You can browse and select files from SharePoint

• Your organization uses its own OAuth credentials

• The connection is isolated to your workspace

• All team members with workspace access can use it

Key Testing Scenarios

Scenario 1: First-Time Setup

1. Configure workspace OAuth (save Client ID, Secret, Tenant ID)

2. Go to Knowledge Base ? Import from SharePoint

3. See OAuth recommendation alert

4. Click "Configure" to verify it links to settings

5. Click "Add Account" and authenticate

Scenario 2: OAuth Not Configured

1. Try importing from SharePoint without OAuth config

2. Should see recommendation alert suggesting to configure

3. Should still be able to use default credentials

4. OAuth alert should prompt for better security

Scenario 3: Multi-Tenant Environment

1. If Tenant ID is set ? only your organization can authenticate

2. If Tenant ID is empty ? any Azure AD user can authenticate (less secure)

3. Verify with users from different tenants

Scenario 4: Permission Issues

1. Test with a user who has limited SharePoint access

2. Verify explorer only shows sites/libraries they can access

3. Test with a user without SharePoint access

4. Should see error or empty site list

Updating or Replacing Credentials

To update credentials:

1. Go to Workspace Settings ? "OAuth Authentication"

2. Find the SharePoint row

3. Click "Edit" or "Configure" again

4. Enter the new values:

   • New Client ID (if changed)

   • New Client Secret (if regenerated)

   • New Tenant ID (if changed)

5. Click "Save Credentials"

When to update:

• If you regenerate the Client Secret in Azure

• If you want to add or change the Tenant ID

• If you change the app registration

• If credentials are compromised

To remove configuration:

1. Click the "Delete" button next to SharePoint

2. Confirm the deletion

3. The platform will revert to default credentials (if available)

This guide is intended for workspace administrators. If you need help, contact your system administrator or refer to the troubleshooting section.