Azure OAuth

Implements OAuth 2.0 authentication against Microsoft Azure Active Directory for secure access to external content platforms.

Remarks

Azure OAuth provides a ready-to-use implementation of OAuth 2.0 authentication, specifically targeting the Microsoft identity platform at https://login.microsoftonline.com/common/oauth2. This enables Grooper to connect to cloud-based repositories and services that require Azure Active Directory authentication, such as Microsoft SharePoint Online, OneDrive, and other Microsoft 365 resources.

Overview

OAuth 2.0 is a widely adopted protocol for secure delegated access to web resources. Azure OAuth handles the authentication flow by redirecting users to the Microsoft login page, obtaining authorization codes, and exchanging them for access and refresh tokens. These tokens are then used to authenticate HTTP requests made by Grooper to the target service.

The class is pre-configured with the appropriate authorization endpoint, redirect URL, and client ID for Grooper's integration with Azure AD. This reduces the complexity of setup and ensures compatibility with Microsoft's recommended authentication practices.

Usage Notes

• Azure OAuth is typically selected as the authentication method for a CMIS Binding or Custom Binding when configuring a CMIS Connection to a Microsoft cloud service.
• When first connecting, users will be prompted to sign in with their Microsoft account. The resulting refresh token is securely stored and reused for subsequent connections, minimizing the need for repeated logins.
• The authentication flow is managed automatically, including token refresh and expiration handling. If the refresh token expires or is revoked, users will be prompted to re-authenticate.
• The 'Authentication' property in the property grid allows administrators to manage credentials and initiate the login process as needed.

After configuration, Grooper will handle all necessary authentication steps for accessing Azure-protected resources.

Properties

Name	Type		Description
Authentication	Refresh Token Info	►	Provide credentials by signing in with a Microsoft account. EditorLogin Editor ConverterLogin Converter Requiredtrue The 'Authentication' property allows administrators to manage OAuth credentials for the connection. When configuring OAuth Authentication, use this property to initiate the login process and store the resulting refresh token. Click the property editor to launch the OAuth login dialog and sign in with the required account. The refresh token is securely stored and used to obtain new access tokens as needed, reducing the need for repeated logins. If the refresh token expires or is revoked, you will be prompted to re-authenticate. A Microsoft account can be created here.

Derived Types

There are 3 implementations of Azure OAuth.

Exchange OAuth	Implements OAuth 2.0 authentication for connecting Grooper to Microsoft Exchange Online (Office 365) using Azure AD.
OneDrive OAuth	Implements OAuth 2.0 authentication for connecting Grooper to Microsoft OneDrive and SharePoint Online using a Microsoft account.
SharePoint OAuth	Implements OAuth 2.0 authentication for connecting Grooper to SharePoint Online (365) using Azure AD.

Used By

ExchangeSharePointWeb Service Lookup