SharePoint Client OAuth (Single-Tenant)

Connect SharePoint via a single-tenant Microsoft app with delegated permissions using the StackOne Hub.

Ensure that your Microsoft account has the “Global Administrator” and “SharePoint Administrator” roles assigned.

You can view and manage user role assignments in your Microsoft Admin center.

This guide configures a single-tenant SharePoint app for use within your organization only. Users outside your organization cannot connect with this app. No Microsoft Partner Center account or publisher verification is required.

If you’ve been directed to StackOne to integrate with SharePoint using a single-tenant app, the following steps will help you configure a successful integration.

Create and Configure a New Application

1. Log in to Microsoft Azure

   Log in to your Microsoft Azure portal.

   
2. Navigate to App Registrations

   Go to your Microsoft Entra admin center.

   In the left navigation bar, click “Applications” > “App registrations”.

   
3. Register a New Application

   Under App Registrations, click the ”+ New registration” button.

   
4. Configure Application Details

   Under Register an application, input the following details:

   • Name
   • Supported account types
     • Select “Accounts in this organizational directory only (Single tenant)”
   • Redirect URI
     • Select “Web”
     • Enter the URI: https://api.stackone.com/connect/oauth2/sharepoint/callback

   Once complete, click “Register” to create the new application.

   
5. Obtain the App Client ID and Tenant ID

   After registration, you’ll be taken to the application overview page.

   Copy the following values and store them safely to be used in a later step:

   • Application (client) ID

   • Directory (tenant) ID

   
6. Obtain the Application Client Secret

   Under Client credentials on the right, click “Add a certificate or secret”.

   

   Under Client secrets, click the ”+ New client secret” button.

   

   Under Add a client secret, enter a description and select your desired expiration date for this secret.

   Please keep in mind that a new secret will need to be generated when this one expires.

   Click the “Add” button to proceed.

   

   The new client secret will be displayed. Copy the Value and store it safely to be used in a later step.

   Make sure to copy this value now. It will not be displayed again.

   

   Under Configured permissions, click the “Add a permission” button.

   Under Request API permissions, click “Microsoft Graph”.

   

   The application requires the following Delegated Permissions:

   • Files.Read - Read user files
   • Files.Read.All - Read all files that user can access
   • Files.ReadWrite - Read and upload user files
   • offline_access - Maintain access to data you have given it access to
   • User.Read - Sign in and read user profile
   • User.ReadBasic.All - Read all users’ basic profiles

   After selecting all of the listed permissions above, click the “Add permissions” button.

7. Grant Admin Consent for Permissions

   All of the added permissions will be listed under Configured permissions. Please ensure that all of the permissions above are listed.

   Click the “Grant admin consent” button to approve all of the listed permissions.

   Click the “Yes” button to confirm Admin approval.

   

Get your SharePoint Base URL

Your SharePoint base URL follows this format:

https://{your-domain}.sharepoint.com

You can find this URL by:

1. Opening your Microsoft SharePoint site
2. Copying the base URL from your browser’s address bar

Congratulations, you’re all set! If you face any issues with the steps mentioned above, please contact us by emailing [e-mail]. We’re always here to assist you!

Available data

This integration has the following Documents Resources available from the provider:

• Drives
• Files
• Folders