The following instructions are not mandatory. UpSlide has its own Tenant to connect with SharePoint, so you don’t need to create one. However, if you don’t want UpSlide to use its Tenant, here is the procedure to create your own Single Tenant application in Microsoft Entra ID.
Summary
- Create the Microsoft Entra ID application
- Customize the application
- Add needed permissions
- Grant consent for the whole tenant
- Send the details of your app to UpSlide
Create the Microsoft Entra ID application
- Connect to Azure Portal using tenant administrator rights and go to Microsoft Entra ID.
- Go to App Registration and click New Registration.
- Set a name for your application, and make sure that Supported account type is set to Accounts in this organizational directory only.
Once the application has been created, you will need to:
- Customize the application to be recognized as a Client (Desktop) application.
- Set scopes and grant consent for all the users.
Customize the application
- Save the Application (client) ID and Directory (tenant) ID (you will need to provide both to us).
- Click Authentication, then Add redirect URI.
- Under the Select a platform to add redirect URI right hand pane, select Mobile and desktop applications.
- Set a custom redirect URI, for example, http://localhost/upslide.
- This URL will never be used, so it does not need to target a real working URL, but it is needed to set the AAD App to Client mode. We will need this information to set up the link on our side.
- Still in the Authentication tab under the Settings menu, enable the Allow public client flows toggle. This allows UpSlide to operate without requiring a locally running server to handle authentication.
Add needed permissions
- Go to your application and go to API Permissions, then click Add a permission.
- Select SharePoint, choose Delegated Permissions as type of permissions required, and check the permissions below:
- AllSites.Write
- AllSites.Manage
- Click Add permissions to validate the selection.
- Click Add a Permission again -> APIs my Organization uses and search for Microsoft Graph.
- Then apply the delegated permissions below:
- Files.Read.All
- Sites.Read.All
- User.Read
- offline_access
- openid
- profile
Those permissions are delegated permissions and does not overtake the current users permissions.
Grant consent for the whole tenant
In the API permission page, click Grant admin consent for [xxx]
This will redirect you to a consent page (you may be prompted to log in). You will find the list of permissions previously added, and you will be able to grant the consent for your organization.
Send the details of your app to UpSlide
Once the app registration is complete, please send us:
- the application client ID
- your subscription (tenant) ID
- the configured reply URL
We will adapt our settings for the SharePoint authentication to work with your application.