Configuring authentication values for Sharepoint

Learn how to set up a Sharepoint OAuth application in the WRITER web app to enable a data sync with Knowledge Graph.

Step 1

Begin by creating an OAuth app in the WRITER web app.

You'll need to fill in the OAuth application values for this popup below.

For Application name, you can use whichever you prefer. This application name will appear on the Knowledge Graph setup page as team admins set up graphs for their teams.

To fill in Client ID and Client secret, you'll need to head over to Microsoft Azure and follow the remaining steps below.

Step 2

Log into Microsoft Azure (you’ll need to be an Azure Admin).

Step 3

Go to Azure Services. Then, select App Registration, followed by New registration.

Step 4

On the following screen, select supported account types.

Select Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant).

Step 5

For Redirect URI, enter: https://app.writer.com/connector/sharepoint   

Step 6

Next, you’ll need to request API permissions for your application.

Head to Manage, then API permissions, and select Microsoft Graph. Add permissions for:

1. Sites.Read.All
2. Files.Read.All
3. User.Read

Steps to authenticate Selected Site app

Your Sharepoint administrator needs to run Microsoft API calls to achieve this. Suggested approach is to log in to https://developer.microsoft.com/en-us/graph/graph-explorer and follow these steps:

1. Find the ID of the Sharepoint site(s) that the application should have access to:

GET https://graph.microsoft.com/v1.0/sites?search=<search-with-sharepoint-site-name>

2. Grant application access:

POST https://graph.microsoft.com/v1.0/sites/<the-site-id-above>/permissions
Content-Type: application/json{ 
 "roles": ["read"],
 "grantedToIdentities": [{
    "application": {
      "id": "<application-client-id>",  //Target Application's Client Id
      "displayName": "application-display-name"       //Target Application's Display name
    }
  }]
}

Step 7

To enable the file picker, you need to allow the authorization endpoint to issue tokens. Be sure to check these two boxes: Access tokens (used for implicit flows), and ID tokens (used for implicit and hybrid flows)

Step 8

Next, you’ll need to add the client secret ID and value to your OAuth app in the WRITER web app under the Client Secret field.

Head to Client credentials. Select Add a certificate or secret.

Then, select New Client Secret. Copy the Value field to your clipboard and add it to your WRITER OAuth app in the Client Secret field.

Step 9

Finally, you'll need to copy the Application ID from Azure and paste it into the Client ID field in the WRITER OAuth app popup.