Microsoft Graph API SharePoint

introduction this guide explains how to authenticate the microsoft graph api sharepoint connector in swimlane using oauth 2 0 client credentials the connector uses an azure ad (microsoft entra id) application to securely authenticate with microsoft graph and perform sharepoint operations such as managing sites, lists, folders, files, and document libraries prerequisites before configuring the connector, ensure that you have a microsoft 365 tenant administrator access to microsoft entra id (azure ad) permission to register applications a sharepoint online site permission to grant microsoft graph api application permissions required credentials collect the following information during setup credential description url microsoft graph api endpoint token url oauth token endpoint client id azure application (client) id client secret azure application client secret scope microsoft graph permission scope register an application in microsoft entra id take the following steps to create an azure application sign in to the microsoft azure portal navigate to microsoft entra id > app registrations click new registration enter a name for the application select accounts in this organizational directory only click register configure microsoft graph permissions open the newly created application select api permissions click add a permission select microsoft graph select application permissions add the permissions required for your sharepoint operations typical permissions include sites readwrite all files readwrite all depending on your workflows, you may also require user readwrite all directory readwrite all directory accessasuser all mail readwrite mail send securityevents read all securityevents readwrite all sites readwrite all is required for sharepoint actions click add permissions click grant admin consent for your organization create a client secret select certificates & secrets click new client secret enter a description select an expiration period click add copy the value of the client secret immediately the client secret value is displayed only once store it securely obtain the required values from the application's overview page, copy application (client) id directory (tenant) id construct the following urls microsoft graph api url https //graph microsoft com token url replace \<tenant id> with your azure tenant id https //login microsoftonline com/\<tenant id>/oauth2/v2 0/token scope https //graph microsoft com/ default configure the connector in swimlane log in to turbine navigate to orchestration > assets click the plus (+) icon select microsoft graph api sharepoint choose ms graph sharepoint oauth 2 0 client credentials as the configuration type configure the asset using the following values field value url https //graph microsoft com token url https //login microsoftonline com/\<tenant id>/oauth2/v2 0/token client id azure application (client) id client secret azure client secret scope https //graph microsoft com/ default verify ssl optional http proxy optional click create delegated authentication (optional) the connector also supports oauth 2 0 password grant (delegated authentication) , which authenticates on behalf of a microsoft entra user this method requires the following additional credentials tenant id username password client id client secret use delegated authentication only when user context access is required microsoft recommends using client credentials whenever possible for service to service integrations troubleshooting authentication failed verify that the client id and client secret are correct the client secret has not expired the token url includes the correct tenant id insufficient privileges verify that required microsoft graph permissions have been granted admin consent has been granted for the application the application has the sharepoint permissions required for the actions being performed unable to access sharepoint sites verify that the sharepoint site exists the application has sites readwrite all permission the correct site id is being used for sharepoint actions you can retrieve the site id using the connector's get site action ssl or proxy issues if ssl verification fails verify that the microsoft graph endpoint presents a trusted certificate confirm that any corporate proxy is configured correctly disable verify ssl only for testing if permitted by your organization's security policy result you have successfully authenticated the microsoft graph api sharepoint connector in swimlane using oauth 2 0 client credentials sources microsoft graph api documentation https //learn microsoft com/graph/api/overview https //learn microsoft com/graph/api/overview microsoft entra id – register an application https //learn microsoft com/entra/identity platform/quickstart register app https //learn microsoft com/entra/identity platform/quickstart register app microsoft graph permissions reference https //learn microsoft com/graph/permissions reference https //learn microsoft com/graph/permissions reference microsoft identity platform oauth 2 0 client credentials flow https //learn microsoft com/entra/identity platform/v2 oauth2 client creds grant flow https //learn microsoft com/entra/identity platform/v2 oauth2 client creds grant flow microsoft graph sharepoint api documentation https //learn microsoft com/graph/api/resources/sharepoint https //learn microsoft com/graph/api/resources/sharepoint microsoft graph sites api https //learn microsoft com/graph/api/resources/site https //learn microsoft com/graph/api/resources/site microsoft graph lists api https //learn microsoft com/graph/api/resources/list https //learn microsoft com/graph/api/resources/list microsoft graph drive api https //learn microsoft com/graph/api/resources/driveitem https //learn microsoft com/graph/api/resources/driveitem