Setting up OAuth for Sharepoint

Sign in to the Azure portal.

If it asks if you want a tour select "Maybe Later"

In the left-hand navigation pane, click on "Microsoft Entra ID." If you cannot see the navigation panel click on the three lines in the top left of the page next to the Microsoft Azure logo.

Click on "App registrations."

Click on "Register an application"

Enter a name for your application, such as "Medialake.ai.

Select the supported account type. Please select the "Accounts in this organisational directory only".

Enter your Redirect URI. This is the URL where users will be redirected after they authenticate with Microsoft and should look something like this, where your domain is followed by the subdirectory: https://'YOUR_DOMAIN'/auth/callback/azure

Make sure the platform is selected as "web".

Click on the "Register" button.

Click on "API permissions" on the left hand side navigation panel. This brings you to the API Permissions page. The Microsoft Graph permissions should already be added, with the "User.Read" Delegated permission already filled out.

Click on "Add a permission."

Select the API you want to access. In this case we will be adding the Sharepoint API. If the Microsoft Graph permission mentioned above is not added, please repeat the process for that API permission.

Select the Delegated permissions option.

Either type the following permissions in you wish to add, or search for them in the dropdown lists on the page. Please enable by ticking:

AllSites.FullControl

AllSites.Read

MyFiles.Read

Sites.Search.All

User.Read.All

Made sure you click "Add permissions" at the bottom of the page. You should be taken back to a list of all configured permissions that now looks like the image below.

Click on "Certificates & secrets" in the navigation bar on the left hand side of the page. If you can't see the navigation bar, you can click the small arrow in the top left of the page

Click on "New client secret."

Enter a description for the secret, such as "Medialake.ai ", select its expiration, and then click "Add." We suggest putting a date as far in the future as possible to avoid repeating this process regularly when the permission expires.

Copy the value of the secret ID. You will need it to enter on the settings page in the medialake.ai website.

Click on "Overview."

Copy the "Application (client) ID" and "Directory (tenant) ID." You will also need to these values along with the client secret to configure OAuth in the Medialake settings.