Overview
This guide provides step-by-step instructions for connecting SharePoint to GIA. The integration enables users to access and manage SharePoint files directly within the GIA platform using delegated access.
Prerequisites
Before you begin, ensure you have:
- Active SharePoint subscription
- IT Administrator access to Azure Active Directory
- User accounts with appropriate SharePoint permissions
- GIA admin account
Step 1: IT Admin Setup (One-Time Configuration)
Role: IT Administrator
The IT Administrator must create a delegated access application in Azure Active Directory. This is a one-time setup that enables secure OAuth authentication for your organization.
1.1 Create Delegated Access Application
- Follow the official StackOne integration guide: SharePoint Private OAuth Setup
- Complete the Azure AD application registration process
- Configure the required API permissions
- Generate a client secret
1.2 Collect Required Credentials
After completing the setup, collect the following credentials. These will be shared with each admin user who needs to connect their SharePoint account to GIA.
| Credential | Description |
|---|---|
| Tenant ID | Your Azure AD tenant identifier |
| Client ID | Application (client) ID from Azure AD |
| Client Secret | Generated secret value (keep confidential) |
| SharePoint URL | Your organization's SharePoint site URL (e.g., https://yourcompany.sharepoint.com/) |
1.3 Example Credentials
Note: The following are example credentials for reference only. Use your actual values.
Tenant ID: d4decfc3-1643-4529-8f67-c94b502e23da Client ID: de7f5513-579c-4185-ae8c-9596103889d9 SharePoint URL: https://gptest804.sharepoint.com/ Secret: YOURSECRET
Step 2: Admin User Connection
Role: GIA Administrator (end user)
Once the IT Administrator has shared the credentials, follow these steps to connect your SharePoint account to GIA.
2.1 Access Connection Wizard
- Log in to your GIA account
- Navigate to one of the following sections:
- Connected Systems
- Company Knowledge
- Click on the Connect to SharePoint icon
- The SharePoint Connection Wizard will open
2.2 Enter Credentials
In the connection wizard, enter the credentials provided by your IT Administrator:
- Tenant ID
- Client ID
- Client Secret
- SharePoint URL
2.3 Authenticate with SharePoint
- Click Connect
- You will be redirected to Microsoft's login page
- Sign in with your SharePoint credentials
- Grant the necessary permissions when prompted
- You will be redirected back to GIA once authentication is complete
Important: With delegated access implementation, you will only see SharePoint content that you have permission to access. This ensures data security and privacy.
Step 3: Upload and Manage Files
Once connected, you can access your SharePoint files directly within GIA.
3.1 Using the File Picker
- Navigate to the section where you want to add files
- Click the Add Files button
- The StackOne file picker will open, showing your accessible SharePoint content
- Browse your SharePoint folders and select the files you want to upload
- Click Upload to import the selected files into GIA
3.2 Delegated Access Benefits
- Security: Only content you have permission to access in SharePoint will be visible
- Privacy: Files are fetched based on your individual SharePoint permissions
- Compliance: Maintains your organization's access control policies
Current Limitations
Single SharePoint Site Restriction
- Current Limitation: Only sites under the main SharePoint URL (configured during IT setup) are accessible
-
Example: If your main URL is
https://company.sharepoint.com/, only sites within this domain can be accessed - Workaround: Users cannot currently connect to multiple SharePoint accounts or different SharePoint site collections
Future Enhancements
Support for multiple SharePoint accounts and site collections is planned for a future release. Implementation requires:
- UI/UX changes to accommodate multiple connections
- Backend architecture updates
- Database schema modifications
- Estimated Development Time: Approximately 5 days
Troubleshooting
Connection Issues
Problem: Unable to connect to SharePoint
Solutions:
- Verify all credentials are correct (Tenant ID, Client ID, Secret, SharePoint URL)
- Ensure the SharePoint URL includes the protocol (
https://) and trailing slash - Check that the Azure AD application has proper API permissions configured
- Verify your user account has access to the SharePoint site
No Files Visible
Problem: File picker shows no content
Solutions:
- Confirm you have appropriate permissions in SharePoint
- Check that the SharePoint site you're trying to access is under the configured main URL
- Try disconnecting and reconnecting your SharePoint account
Authentication Errors
Problem: Authentication fails during login
Solutions:
- Ensure you're using the correct Microsoft account credentials
- Check if your account requires multi-factor authentication (MFA) and complete it
- Verify the client secret hasn't expired (secrets typically expire after 1-2 years)
- Contact your IT Administrator to regenerate the secret if needed
Security Best Practices
- Credential Security: Keep your Client Secret confidential. Never share it publicly or commit it to version control
- Access Control: Regularly review and update SharePoint permissions to ensure users only have access to necessary content
- Secret Rotation: Rotate client secrets periodically (recommended every 12 months)
- Audit Logs: Monitor Azure AD and SharePoint audit logs for suspicious activity
- Least Privilege: Only grant the minimum API permissions required for the integration
Support and Resources
Documentation Links
Contact Information
For technical support or questions, please contact:
- IT Department: For credential-related issues and Azure AD configuration
- GIA Support: For application-specific issues and feature requests
Appendix
Glossary
| Term | Definition |
|---|---|
| Azure AD | Azure Active Directory - Microsoft's cloud-based identity and access management service |
| Delegated Access | Authentication method where an application acts on behalf of a user, respecting their existing permissions |
| OAuth | Open Authorization - industry-standard protocol for secure authorization |
| Tenant ID | Unique identifier for your organization's Azure AD instance |
| Client ID | Unique identifier for the Azure AD application |
| Client Secret | Secret key used to authenticate the application (like a password) |
| StackOne | File picker integration service used by GIA to connect to SharePoint |