> ## Documentation Index > Fetch the complete documentation index at: https://docs.stackone.com/llms.txt > Use this file to discover all available pages before exploring further. # SharePoint OAuth 2.0 connector profile – StackOne setup guide > Set up the OAuth 2.0 connector profile for SharePoint in StackOne. One-time admin setup required before your users can link SharePoint accounts via Hub. You must have at least Application Developer permissions in your Azure account to register applications in Microsoft Entra ID. An administrator must also grant consent for the required API permissions.
Select Actions to adjust the guide
Some actions may require additional configuration in the provider to be accessible. Choose the actions you need and the guide will be updated.
Action
Scope(s)
Loading actions...
Dynamic Guide URL
Scopes Selected

          

            
Separator

Register Your Application in Microsoft Entra ID

To connect SharePoint with StackOne, you need to register an application in Microsoft Entra ID to obtain OAuth 2.0 credentials.

Sign in to the Microsoft Entra admin center as at least an Application Developer. If you have access to multiple tenants, use the Settings (gear) icon in the top-right corner to select the correct directory.

In the left sidebar, click Entra ID, then select App registrations and click New registration. If you do not see it, use the search bar at the top of the page to search for App registrations.

  • Enter a meaningful Name for your app (e.g., StackOne SharePoint Integration).
  • Under Supported account types, select the option that matches your organization (typically Accounts in this organizational directory only for single-tenant access).
  • Leave the Redirect URI (optional) section blank for now.
  • Click Register.
Register an application form showing the Name field, Supported account types dropdown, and Register button

After registration, you are directed to the application's Overview page. In the Essentials section, copy the Application (client) ID value. Enter this value in the Client ID field in the StackOne connection form.

App Overview page showing the Essentials section with the Application (client) ID field

Configure Redirect URI

Set up the OAuth 2.0 callback URL to enable the authentication flow between StackOne and SharePoint.

From your app's left menu under Manage, select Authentication (Preview).

Authentication (Preview) page showing the Redirect URI configuration tab and + Add Redirect URI button

On the Redirect URI configuration tab, click + Add Redirect URI. On the Select a platform to add redirect URI panel that opens, select Web under Web applications.

In the Redirect URI field that appears, enter the StackOne OAuth callback URL and click Configure.

  • Redirect URI — `https://api.stackone.com/connect/oauth2/sharepoint/callback`
Add Redirect URI panel for Web platform showing the Redirect URI input field and Configure button

Configure API Permissions

Grant your application the Microsoft Graph API permissions required to access SharePoint data. API access is controlled by the permissions granted here — not by the scopes in the OAuth token.

From the left menu under Manage, select API permissions.
Enables actions: Get Drive, Get Drive Item, Get Item, Get List, Get List Columns, Get List Operations, Get Root Site, Get Site, Get Site By Path, Get Site Columns, Get Site Content Types, List Drive Item Children, List Drive Root Children, List Items, List Site Drives, List Site Lists, List Sites, List Subsites, Search Sites

Click + Add a permission, then select Microsoft Graph from the Microsoft APIs tab.

  • Select Delegated permissions.
  • Search for Sites and expand the Sites group.
  • Check the boxes for the scopes required for your integration.
  • Click Add permissions.
Sites permissions list showing Sites.Read.All and Sites.ReadWrite.All checkboxes

Click Grant admin consent for \[tenant name] and select Yes to consent on behalf of all users in your tenant. After granting, verify that the Status column shows consent granted for each permission. Without admin consent, API calls will return 403 Forbidden errors.

API permissions page showing the Grant admin consent for StackOne button and configured permissions table

Generate Client Secret

Create a client secret that StackOne uses to authenticate requests on behalf of your application.

From the left menu under Manage, select Certificates & secrets.

Certificates & secrets page with the Client secrets tab and + New client secret button

Under the Client secrets tab, click + New client secret.

  • Enter a Description (e.g., StackOne Integration Secret).
  • Select an Expires period from the dropdown.
  • Click Add.
Add a client secret dialog with Description field and Expires dropdown

Immediately copy the Value of the newly created client secret and enter it in the Client Secret field in the StackOne connection form. This value is only shown once and cannot be retrieved again.

The Scopes field in the StackOne connection form is optional. If left blank, it defaults to `https://graph.microsoft.com/.default offline_access`, which requests every permission granted to the app registration. When supplying custom scopes, separate them with spaces and always include `offline_access` (required for refresh tokens) — for example `Sites.Read.All Files.Read.All offline_access` for read-only, or `Sites.ReadWrite.All Files.ReadWrite.All offline_access` for read-write.
## Creating the StackOne Connector Profile To create the Connector Profile in StackOne for SharePoint: Login to StackOne and navigate to [Connector Profiles](https://app.stackone.com/connector_profiles)
  • Click + Connector Profile
  • Search for and select SharePoint
  • Select Type as OAuth 2.0
  • Fill out the fields using details retrieved from your provider:
    • Client ID
    • Client Secret
    • Scopes (Optional)
  • (Optional) Select Actions to be enabled for this Connector Profile
  • Click Create profile
 Congratulations! The new Connector Profile will now show up in your project ready to be used. You can now continue to Link Accounts for SharePoint.