Microsoft SharePoint Online Spoke Personal OAuth Configuration - Support and Troubleshooting

Microsoft SharePoint Online Spoke Personal OAuth Configuration .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: #000000; } span { font-size: 12pt; font-family: Lato; color: #000000; } h2 { font-size: 24pt; font-family: Lato; color: black; } h3 { font-size: 18pt; font-family: Lato; color: black; } h4 { font-size: 14pt; font-family: Lato; color: black; } a { font-size: 12pt; font-family: Lato; color: #00718F; } a:hover { font-size: 12pt; color: #024F69; } a:target { font-size: 12pt; color: #032D42; } a:visited { font-size: 12pt; color: #00718f; } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } Microsoft SharePoint Online Spoke Personal OAuth Configuration

This document only addresses the areas where changes are needed to use personal OAuth for Microsoft SharePoint Online Spoke. For the remaining settings, please refer Microsoft SharePoint Online Spoke Documentation .

1. Make sure all the permissions on the Azure side are configured as Delegated (Example):

2. Under Credentials: integration type should be set as personal for both " MicrosoftSharePointGraph " and " MicrosoftSharePointOnline " Aliases.

Note: Integration Type will only be visible if the application Registry/OAuth Profile “Default Grant Type is set to Authorization Code”.

3. Application Registry should look like below for both Graph and SharePoint ( for SharePoint, no certificate is needed to configure, as it is only needed if using client credentials type )

3.1 SharePoint Graph (Example)

Scope:

3.2 SharePoint Rest (Example)

S cope:

4. Install the plugin “ Personal Authentication ”.

5. Assign the “ sn_personal_auth.personal_auth_user ” role to all users who will access the SharePoint, as this role is required for each user individually.

6. For testing purposes, when logged in as a different user and searching for personal integrations, a dashboard will open displaying both Graph and SharePoint options. By selecting Authenticate, the login page will be presented, allowing users to enter their credentials. Each user will then receive a dedicated token, which can subsequently be used to execute actions.

Note: Personal OAuth can only be utilized with flows or subflows executed as the user. Attempting to execute actions directly using Personal OAuth will result in unsuccessful execution.