SharePoint OAuth

Implements OAuth 2.0 authentication for connecting Grooper to SharePoint Online (365) using Azure AD.

Remarks

SharePoint OAuth provides a secure, standards-based authentication method for accessing SharePoint Online and Microsoft 365 resources from Grooper. This class manages the OAuth 2.0 flow required by Azure Active Directory (Azure AD), enabling Grooper to connect to SharePoint sites, document libraries, and subsites in cloud environments.

Overview

When SharePoint OAuth is selected as the authentication method for a SharePoint binding, Grooper uses the configured Azure AD application credentials (Client ID, Client Secret, and Tenant ID) to obtain access and refresh tokens. These tokens are used to authenticate all HTTP requests to SharePoint Online via the Microsoft Graph or SharePoint REST APIs.

The required OAuth scopes are pre-configured to allow reading and writing files and sites, as well as offline access:

• Files.ReadWrite.All
• Sites.ReadWrite.All
• offline_access

Usage Notes

• SharePoint OAuth is required for SharePoint Online (365) and is not supported for on-premises SharePoint servers.
• Before use, register an application in Azure AD and grant it the necessary API permissions. Enter the Client ID, Client Secret, and Tenant ID in the corresponding properties of the authentication method.
• When prompted, sign in with a Microsoft account that has access to the target SharePoint resources.
• After successful authentication, Grooper will store a refresh token and use it to maintain access without repeated logins.
• If the refresh token expires or is revoked, you will be prompted to re-authenticate.

For more information on Azure AD application registration and required permissions, see the Grooper documentation and Microsoft's official documentation for SharePoint Online and Microsoft Graph API.

Properties

Name	Type		Description
Authentication	Refresh Token Info	►	Provide credentials by signing in with a Microsoft account. EditorLogin Editor ConverterLogin Converter Requiredtrue The 'Authentication' property allows administrators to manage OAuth credentials for the connection. When configuring OAuth Authentication, use this property to initiate the login process and store the resulting refresh token. Click the property editor to launch the OAuth login dialog and sign in with the required account. The refresh token is securely stored and used to obtain new access tokens as needed, reducing the need for repeated logins. If the refresh token expires or is revoked, you will be prompted to re-authenticate. A Microsoft account can be created here.

Used By

ExchangeSharePointWeb Service Lookup