> For the complete documentation index, see [llms.txt](https://docs.ovaledge.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ovaledge.com/release7.2/connectors/connector-repositories/file-connectors/sharepoint/sharepoint-microsoft-entra-authentication.md).

# SharePoint - Microsoft Entra Authentication

This article outlines the process for creating and configuring a Microsoft Entra application registration to obtain the authentication credentials required for establishing a connection with the SharePoint connector. The generated Client ID, Tenant ID, and Client Secret are required to validate and configure the SharePoint connector within the OvalEdge application.

The SharePoint connector uses Microsoft Entra authentication and requires a properly configured application registration with the necessary API permissions and administrative consent.

## Prerequisites

Before proceeding with the application setup, ensure the following requirements are met:

<table><thead><tr><th width="200.33331298828125">Prerequisite</th><th>Description</th></tr></thead><tbody><tr><td>Microsoft Entra Access</td><td>Access to the Microsoft Entra admin center with permission to create application registrations.</td></tr><tr><td>Azure Portal Access</td><td>Access to the Azure portal for application registration and credential management.</td></tr><tr><td>Administrative Access</td><td>Permission to grant Microsoft Graph API permissions and admin consent.</td></tr></tbody></table>

{% hint style="warning" %}
Administrative approval is required to grant Microsoft Graph permissions and consent before the generated credentials can be used for connector authentication.
{% endhint %}

## Create an Application Registration

### Step 1: Access Microsoft Entra Admin Center

1. Sign in to the **Microsoft Entra admin center** using the following URL: <https://portal.azure.com/auth/login/>
2. Navigate to **App Registrations**.

   <img src="https://1813356899-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhTnkoJQml0pok9awFDhx%2Fuploads%2FiYsnpjIuMoqzdPVoSOdI%2Funknown.png?alt=media&amp;token=ad22c0a6-866c-4354-9860-d7c0e0e50b23" alt="" height="345" width="624">

### Step 2: Create a New Application Registration

1. Click **New Registration**.

   <img src="https://1813356899-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhTnkoJQml0pok9awFDhx%2Fuploads%2FeKzISzxAju00tpdFYok1%2Funknown.png?alt=media&amp;token=2fa97ddb-3227-4a3a-bec9-7a7218182980" alt="" height="325" width="624">
2. Enter a name for the application.
3. Click **Register**.

   <img src="https://1813356899-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhTnkoJQml0pok9awFDhx%2Fuploads%2Ftf1170gC9EV0QO3DzKgI%2Funknown.png?alt=media&amp;token=811da743-ed3e-4772-b4c8-cec00415ec81" alt="" height="359" width="624">

### Step 3: Open the App Registration

1. Navigate to **App Registrations**.
2. Click **All Applications**.
3. Search for the newly created application.
4. Open the application registration.

   <img src="https://1813356899-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhTnkoJQml0pok9awFDhx%2Fuploads%2FyfqqQlpAkYb8oHcNd92n%2Funknown.png?alt=media&amp;token=d98f2a0b-913d-4d88-8e47-bf85e0e78d75" alt="" height="329" width="624">

## Retrieve Authentication Credentials

### Retrieve Client ID and Tenant ID

1. Navigate to the **Overview** page of the application registration.
2. In the Essentials section, copy the following values:

| Credential | Azure Field             |
| ---------- | ----------------------- |
| Client ID  | Application (Client) ID |
| Tenant ID  | Directory (Tenant) ID   |

<img src="https://1813356899-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhTnkoJQml0pok9awFDhx%2Fuploads%2F8BPLAIhY87kW5gvemcLO%2Funknown.png?alt=media&amp;token=dd0a2595-a8a3-42d4-afd8-5b1513bceaea" alt="" height="365" width="624">

### Create a Client Secret

1. Navigate to **Certificates & Secrets**.

   <img src="https://1813356899-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhTnkoJQml0pok9awFDhx%2Fuploads%2FI4XQxWPm8km9eIW2b0Hg%2Funknown.png?alt=media&amp;token=bee1510a-96bf-48f7-9640-3a0db56642f1" alt="" height="329" width="624">
2. Click **New Client Secret**.

   <img src="https://1813356899-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhTnkoJQml0pok9awFDhx%2Fuploads%2F1L98y03tuBXzqb4pU0vL%2Funknown.png?alt=media&amp;token=83572f12-7d71-478c-8258-7d7a54ff5d2a" alt="" height="331" width="624">
3. Enter a **description**.
4. Select the required **expiration period**.
5. Click **Add**.

   <img src="https://1813356899-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhTnkoJQml0pok9awFDhx%2Fuploads%2FvjQWHPCUqAPoW5lvSP38%2Funknown.png?alt=media&amp;token=89d1b691-0950-484f-9b84-db79f0ccc80e" alt="" height="359" width="624">

### Retrieve Client Secret

1. Copy the Value immediately after the **client secret** is created.

   <img src="https://1813356899-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhTnkoJQml0pok9awFDhx%2Fuploads%2FcyBihlML6HS2E3FezGFU%2Funknown.png?alt=media&amp;token=f24cd5c7-7e7c-4321-8922-be2430856187" alt="" height="331" width="624">

{% hint style="warning" %}
The Client Secret value is displayed only once during creation. Ensure that the value is copied and stored securely before leaving the page.
{% endhint %}

## Configure API Permissions

### Step 1: Add Microsoft Graph Permissions

1. Navigate to **API Permissions**.
2. Click **Add a Permission**.

   <img src="https://1813356899-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhTnkoJQml0pok9awFDhx%2Fuploads%2FxovoWtTLQhGomrOIjVBf%2Funknown.png?alt=media&amp;token=b69f9c34-78b7-4345-870b-e6e3066c1128" alt="" height="340" width="624">
3. Select **Microsoft Graph**.

   <img src="https://1813356899-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhTnkoJQml0pok9awFDhx%2Fuploads%2FHw6CIhobWayAZRg3pUvT%2Funknown.png?alt=media&amp;token=b61faa30-8aad-4c23-8b9d-a308bdf75dc9" alt="" height="363" width="624">
4. Select **Application Permissions**.

   <img src="https://1813356899-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhTnkoJQml0pok9awFDhx%2Fuploads%2FrrMGc7LI0sdglm7xLeYw%2Funknown.png?alt=media&amp;token=5c140444-d7f1-4c24-a055-eef18755113d" alt="" height="361" width="624">
5. Search for **Sites.Read.All**.
6. Select the **Sites.Read.All** permission.
7. Click **Add Permissions**.

   <img src="https://1813356899-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhTnkoJQml0pok9awFDhx%2Fuploads%2F4ZRcQDQTHhNHRnXMO8Ir%2Funknown.png?alt=media&amp;token=9de941d8-c24f-4d24-b1a2-832056c067c8" alt="" height="349" width="624">

### Step 2: Grant Administrative Consent&#x20;

1. Click **Grant Admin Consent**.

   <img src="https://1813356899-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhTnkoJQml0pok9awFDhx%2Fuploads%2FlbAj1UDSetg2XJAc83cI%2Funknown.png?alt=media&amp;token=b07237cf-855c-45a0-88a2-c106c9e6f600" alt="" height="359" width="624">
2. Click **Yes** to confirm.

   <img src="https://1813356899-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhTnkoJQml0pok9awFDhx%2Fuploads%2FKvNE0u3J0KBrvoD2WKzu%2Funknown.png?alt=media&amp;token=4f602637-e003-4848-af6a-5c61a3ca7a7e" alt="" height="357" width="624">

{% hint style="warning" %}
Administrative consent must be granted before the SharePoint connector can access SharePoint metadata.
{% endhint %}

## Credentials Required for Connector Configuration&#x20;

The following values are required when configuring the SharePoint connector in OvalEdge:

| Credential    | Description                                               |
| ------------- | --------------------------------------------------------- |
| Client ID     | Application (Client) ID from the application registration |
| Tenant ID     | Directory (Tenant) ID from the application registration   |
| Client Secret | Secret value generated for the application registration   |

{% hint style="info" %}
**Disclaimer**

This document is provided for reference purposes only and is subject to change in the future. For the latest information, contact the System Administrator of the system.
{% endhint %}

***

Copyright © 2026, OvalEdge LLC, Peachtree Corners, GA, USA.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.ovaledge.com/release7.2/connectors/connector-repositories/file-connectors/sharepoint/sharepoint-microsoft-entra-authentication.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
