SharePoint setup

Creating Azure AD app for SharePoint access

1. Log into Azure portal and search for "Microsoft Entra ID"

2. Under "Manage -> App registrations" create a new registration

   • Name - choose an app name for integration with SelectZero

   • Supported account types - Choose "Accounts in this organizational directory only (YourCompany only - Single tenant)"

   • Redirect URI - can be left empty

3. Navigate to "Manage -> API Permissions"

   • Add a new permission

   • Choose "Sharepoint"

   • Choose "Application permissions"

   • You can either choose "Sites.Read.All" (Will enable read rights to all SharePoint sites) or "Sites.Selected" (You will also need to enable site access)

   • From "Configured permissions" view you also have to "Grant admin consent for YourCompany "

4. Navigate to "Overview"

   • Copy "Application (client) ID" and "Directory (tenant) ID" which we will need for SelectZero integration

Enabling Site specific access for SharePoint

1. Navigate to your SharePoint site (accessible for admins)

2. Enter following data

   • App Id - From previous step and press "Lookup"

   • Title - Will be automatically filled

   • App Domain - Enter the domain where SelectZero is hosted

   • Redirect URL - Enter the domain where SelectZero is hosted

   • Permission Request XML

Adding SharePoint connection

1. From connections page add a new SharePoint connection

   

   • Connection name - Name for connection itself

   • Server - SharePoint URL with site reference

   • Folder - Folder reference (Starts with '/Shared documents')

   • Server type - Cloud

   • Tenant id - Directory ID from previous step

   • Client id - Application ID from previous step

2. After connection is added, certificate key pair is automatically generated

3. Download connection public certificate from connection view

   

Uploading certificate to Azure

1. After we have downloaded our public certificate we will navigate back to Azure portal "Microsoft Entra ID"

2. Under "Manage -> App registrations" find your app registration

3. Navigate to "Certificates & secrets"

   • Select "Certificates" tab

   • Press "Upload certificate"

   • Upload the public certificate from SelectZero SharePoint connection

   • Description can be left empty

4. After certificate upload you can go back to your SharePoint connection and press "Test" button to check connection (Azure side certificate upload can take a bit of time before connection is reached)

5. If certificate is successfully added, you should see "Connection successful" message

Create a service account

1. In Active Directory you will need to create a new service account

2. On you Sharepoint site, give read access to directory you wish to read

   • Settings -> Site permissions - give read access to created account

Adding connection

1. From connections page add a new SharePoint connection

   

   • Connection name - Name for connection itself

   • Server - SharePoint URL with site reference

   • Folder - Folder reference (Starts with '/Shared documents')

   • Server type - On-premise

   • NTLM user - Domain user from previous step

   • NTLM password - Domain user password from previous step

   • Domain - User domain

2. After connection is added, certificate key pair is automatically generated

3. Download connection public certificate from connection view