To generate the Access Control Lists (ACLs) that are necessary to support mapped security, the connector might need to resolve SIDs into user and group names.
ResolveGroupSystemName
so that the connector uses a different machine for resolving the SIDs. To use the Microsoft Graph API, you must go to the Azure portal and register an application to represent the connector. Full instructions about how to create an application are available in the Microsoft documentation.
The SharePoint Remote Connector has the following requirements:
http://localhost:7878/oauth
). The "type" of the redirect URI should be "Web".API Permissions. The connector requires the following delegated permissions:
Directory.Read.All
offline_access
To resolve SIDs through the Graph API
oauth_tool.cfg
in a text editor. In the [Default]
section, specify any SSL or proxy settings required to access the Graph API:
SSLMethod
|
The version of SSL/TLS to use. |
ProxyHost
|
The host name or IP address of the proxy server to use. |
ProxyPort
|
The port of the proxy server to use. |
In the [OAuthTool]
section, set the following parameters:
AppKey
|
The application key you obtained when you created the application to represent the connector. |
AppSecret
|
The application secret you obtained when you created the application to represent the connector. |
NOTE: If you are using a single-tenant Azure Active Directory you might need to specify your tenant ID in the AuthorizeUrl
and TokenUrl
parameters (replace the value "common").
Open a command-line window and run the following command:
oauth_tool.exe oauth_tool.cfg OAuthTool
Your default web browser opens to the Microsoft web site.
Authorize the application to access the API.
Microsoft provides the OAuth tokens, and the OAuth configuration tool creates a file named oauth.cfg
. This contains the tokens that the connector requires to authenticate.
Include the OAuth tokens in each of your fetch tasks. For example, you can modify the connector configuration file as follows:
[MyTask1] < "oauth.cfg" [OAUTH]
For more information about including parameters from another file, see Include an External Configuration File. The OAuth tool also prints the parameters it has set to the command-line window so that you can set these directly in the connector's configuration file if you prefer.
To access the Graph API, set the following configuration parameters for each of your fetch tasks.
ProxyHost
|
The host name or IP address of the proxy server. |
ProxyPort
|
The port of the proxy server. |
SSLMethod
|
The version of SSL/TLS to use. |
TIP: Connections to SharePoint use the proxy settings in the [Connector]
section of the configuration file. However, connections to the Microsoft Graph API do not use those settings so you must configure proxy server information in the task section.