About OAuth 2.0

OAuth authorization code grant flow

Setting up OAuth 2.0 application in SharePoint

About OAuth 2.0

OAuth 2.0 lets users access instance resources through external clients by obtaining a token rather than by entering login credentials with each resource request.

You must have the security_admin role to manage the OAuth integration. Configure OAuth 2.0 for the following scenarios:

OAuth authorization code grant flow 

Following diagram explains high-level information flow for OAuth 2.0 authentication process 

Reference:  

https://docs.servicenow.com/bundle/newyork-platform-administration/page/administer/security/concept/c_OAuthAuthorizationCodeFlow.html 

Setting up OAuth 2.0 application in SharePoint

 Follow the below steps to register an OAuth 2.0 application on SharePoint using your account.

1. Login into Azure Account using https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationsListBlade 

2. Click on “New registration” and enter following details:
   1. Name : User Friendly Name of OAuth 2.0 App, like “KleraSharePointApp”
   2. Click on Submit button. 

3. On the new page, copy and save followings:
   1. Application ID
4. Go to “Certificates & Secretes” & click on “New client secret”. Enter description and choose validity period. Copy the string generated by the system under column “Value”. This is our Client Secret ID.
   
   
5. Go to “Authentication” and add redirect URL under the “Redirect URIs” section.
   1. Choose Type -> Web
   2. Redirect URI -> Redirect URL of Klera machine.

Sample redirect URI would be https://<HostName.DomainName>:48444/AccountMa nagementWebService/callback.html 

6. Go to API Permissions and click on “Add a permission”. Under SharePoint -> Delegated permissions choose followings:
   1. AllSites -> AllSites.Read
   2. MyFiles -> MyFiles.Read
   3. Sites -> Sites.Search.All
   4. User -> User.Read.All 

7. Go to “Expose an API” and click on Add a scope. Now add following scopes with their user friendly description:
   1. offline_access
   2. Read.All
   3. Read.All
   4. Read
   5. Read.All 

Important:

1. This URL should be accessible from the client machine. Machine from where user is login into Klera.
2. Need to add port 48444 in Firewall/Security systems whitelist. 

For any further information email us at  info@klera.io