Registering Application with OAuth Client Credentials from SharePoint Portal (Deprecated)

To register the SharePoint Online SaaS connector on SharePoint Online portal, complete the following:

  1. Sign in to the following URL with the account that has the global administrator role and generate the Client Id and Client Secret:

    https://<sitename>.SharePoint.com/_layouts/15/appregnew.aspx

    Enter the respective values for the following fields:

    Fields

    Values

    Title

    Add-In

    App Domain

    localhost

    Redirect Url

    https://localhost

  2. Select Create. This registers the Add-In and returns a success message with the created information.

  3. Grant permissions to the Add-In to access the SharePoint data.

    Note
    Provide Full Control permission level to the tenant scope to enable the ability to read, write, and manage the Site Collections information.

Grant Access and Full Control Permissions

The SaaS connector you registered in Registering Application with OAuth Client Credentials from SharePoint Portal (Deprecated), must also be registered on SharePoint Online with tenant level access with Full Control permissions for all configured Site Collections.

Note
Registering Application with OAuth Client Credentials from SharePoint Portal (Deprecated) is getting deprecated by Microsoft soon .

To register the SaaS connector with the correct access level and permissions, complete the following:

  1. Enter the following URL to redirect to the Grant Permission page (where sitename is the URL of your SharePoint site): https://<sitename>-admin.sharepoint.com/_layouts/15/appinv.aspx

  2. In the AppId field, enter the Client ID you created in Registering Application with OAuth Client Credentials from SharePoint Portal (Deprecated).

  3. Select Lookup.This populates the values in the following fields: Title, App, Domain, and Redirect URL.

  4. In the Permissions Request XML field, enter the following permission request (in XML format): 

    Copy
    <AppPermissionRequests AllowAppOnlyPolicy="true">
    <AppPermissionRequest Scope="http://sharepoint/content/tenant" Right="FullControl" />
    </AppPermissionRequests>
  5. Select Create.You are redirected to a page where you must click Trust In.

Enable Custom App Authentication

If you are using a custom authentication method with your application you must manually enable it using PowerShell cmdlets.

Run the following PowerShell cmdlets on Windows PowerShell:

  1. Install the SharePoint Online PowerShell module (if you don't have it) and execute the following command: $orgName = "<your-org-name>"

  2. Authenticate as the SharePoint administrator using the following command: Connect-SPOService - Url https://$orgName-admin.sharepoint.com

  3. Enable the custom application authentication using the following command: Set-SPOTenant -DisableCustomAppAuthentication $false