Microsoft SharePoint

Estimated reading: 6 minutes

 Microsoft SharePoint integration enables Robility to securely connect with Microsoft SharePoint Online. This integration allows users to access and manage files and folders stored in SharePoint document libraries directly from Robility.

The integration uses Microsoft OAuth 2.0 authentication to establish a secure connection between Robility and SharePoint. Users can connect using the standard Microsoft authentication process or configure their own Microsoft Entra ID (Azure AD) OAuth application.

Prerequisites

Before creating a Microsoft SharePoint connection, ensure the following requirements are met:

  • You have an active Microsoft SharePoint Online account.
  • You have the required permissions to access the SharePoint sites and document libraries that will be used in your workflows.
  • If you are using the Bring Your Own OAuth 2.0 App authentication method:
    • A Microsoft Entra ID (Azure AD) application must be registered.
    • The application must have the required Microsoft Graph API permissions.
    • The required Client ID, Client Secret, Tenant ID, and Redirect URI must be available.

Authentication Methods                                                                                                                   

Microsoft SharePoint supports the following authentication methods:

Authentication Method Description
OAuth 2.0 Authorization Code Connects Robility using your Microsoft account through the standard Microsoft sign-in and authorization process.
Bring Your Own OAuth 2.0 App Connects Robility using a custom Microsoft Entra ID (Azure AD) application created and managed by your organization.

Choosing an Authentication Method

OAuth 2.0 Authorization Code

Use this method when you want to connect using an existing Microsoft account without creating a custom application.

Advantages:

  • Simple configuration.
  • Uses the standard Microsoft login process.
  • Supports automatic token refresh.

Bring Your Own OAuth 2.0 App

Use this method when your organization requires control over application registration, permissions, and security policies.

Advantages:

  • Organization-managed authentication.
  • Custom permission configuration.
  • Better control over application access.

Connection Configuration

When using Bring Your Own OAuth 2.0 App, configure the following fields:

Field Description
Client ID The Application (Client) ID generated when registering the Microsoft Entra ID application.
Client Secret The secret key generated for the Microsoft Entra ID application.
Scope Defines the Microsoft Graph API permissions required for SharePoint access.
Tenant ID The unique identifier of your Microsoft Entra ID organization tenant.

Microsoft Graph API Scopes

The Scope field defines the permissions that Robility requests from Microsoft Graph API.

The supported scopes are:

Scope Purpose
offline_access Allows access tokens to be refreshed without requiring repeated user sign-in.
openid Enables OpenID Connect authentication.
profile Provides access to basic user profile information.
email Provides access to the user's email address.
Files.Read Allows reading files that the signed-in user can access.
Files.Read.All Allows reading all files that the signed-in user has permission to access.
Files.ReadWrite Allows reading and modifying files that the signed-in user can access.
Files.ReadWrite.All Allows reading and modifying all files that the signed-in user has permission to access.
Sites.Read.All Allows reading SharePoint site content.
Sites.ReadWrite.All Allows reading and modifying SharePoint site content.
Group.Read.All Allows reading Microsoft 365 group information.
Group.ReadWrite.All Allows reading and modifying Microsoft 365 group information.
User.Read.All Allows reading user profile information across the organization.

Callback URL / Redirect URI Configuration

When registering a custom Microsoft Entra ID application, configure the callback URL displayed on the Robility connection page as the application’s Redirect URI.

The Redirect URI allows Microsoft to securely return the authentication response to Robility after successful login.

URL – https://robilitydev.sutherlandglobal.com/Robility/AppIntegration/Callback

Ensure that:

  • The Redirect URI exactly matches the URL provided by Robility.
  • The correct application type is selected during Microsoft Entra ID registration.
  • The application has the required API permissions.

Connecting Through Bring Your Own OAuth 2.0 App

To create a connection using your organization’s Microsoft Entra ID application:

  1. Enter the Client ID.
  2. Enter the Client Secret.
  3. Configure the required Scopes.
  4. Enter the Tenant ID.
  5. Select Connect.
  6. Sign in using your Microsoft account.
  7. Review and approve the requested permissions.
  8. After successful authentication, the connection is created and available for SharePoint activities.

Connecting Through OAuth 2.0 Authorization Code

To create a connection using standard Microsoft authentication:

  1. Select Connect.
  2. Enter your Microsoft account email address.
  3. Enter your password.
  4. Select Sign in.
  5. Complete any additional Microsoft authentication steps if required.
  6. After successful authentication, you will be redirected back to the Connections page.
  7. The newly created connection will be displayed and available for use.

Adding a SharePoint Connection Through Activities

Microsoft SharePoint activities require a valid connection before they can access SharePoint resources.

IMPORTANT: This feature is currently available only in Integration. The associated activities have not yet been released to the Live environment

Creating a New Connection

  1. Open the required Microsoft SharePoint activity.
  2. Open the Connection dropdown.
  3. Select Add New Connection.
  4. Complete the authentication process.
  5. After successful authentication, the connection becomes available for use.

Using an Existing Connection

If a connection already exists:

  1. Open the Connection dropdown.
  2. Select the required SharePoint connection.
  3. The selected connection will be used by the activity.

The default connection is automatically selected when available.

Managing Invalid Connections

If the selected connection is invalid:

  1. Open the Connection dropdown.
  2. Select Connections.
  3. Remove the connection of the Microsoft account.
  4. Add the connection again.

Once created, the connection can be reused across all Microsoft SharePoint activities within the project.

Troubleshooting

Issue Possible Cause Solution
Unable to create a connection Incorrect authentication details. Verify the Client ID, Client Secret, Tenant ID, and login credentials.
Access denied error Missing SharePoint permissions. Ensure the user or application has the required SharePoint permissions.
Authentication fails Incorrect Redirect URI. Verify that the Redirect URI matches the URL configured in Microsoft Entra ID.
Workflow cannot access files Insufficient file or site permissions. Confirm that the account has access to the SharePoint site and document library.
Connection expires Authentication token is invalid or has expired. Reconnect the account from Manage Connections to generate a new authentication token.

Notes

  • Microsoft SharePoint integration supports SharePoint Online only.
  • Authentication is performed using Microsoft OAuth 2.0.
  • Access to SharePoint resources depends on the permissions granted to the authenticated Microsoft account or Microsoft Entra ID application.
  • Configure Microsoft Graph API permissions according to your organization’s security requirements.
  • OAuth 2.0 Authorization Code authentication supports automatic token refresh.
  • Bring Your Own OAuth 2.0 App authentication requires administrators to manage application credentials and permissions.
  • Always follow your organization’s security policies when granting SharePoint permissions.
Share this Doc

Microsoft SharePoint

Or copy link

CONTENTS
Robility Chatbot
Robility Assistant
Online