Skip to main content

SharePoint user connector: Custom OAuth

With Custom OAuth, your organization's own Microsoft Entra app registration is used instead of the Abacus.AI one. You add the delegated permissions to it yourself: the read-only set for a read-only connector, or the write set if your users need to create or modify SharePoint content.

Step 1: Register the Entra app​

  1. Register an app in Microsoft Entra following the Microsoft documentation.
  2. Add the redirect URI https://abacus.ai/oauth/callback so Abacus.AI can complete the OAuth authorization flow.
  3. Under API permissions, add the delegated permissions for the access level you want: the read-only set or the write set. Include the SharePoint scopes as well as the Microsoft Graph scopes.
  4. Grant admin consent for those permissions from App registrations → your app → API permissions → Grant admin consent.
  5. Create a client secret and note the Client ID and Client Secret.

Step 2: Create the config connector​

  1. Go to the Connected Services Dashboard. You can click your profile in the top right and then click Manage Connectors.
  2. Click Add New Connector, select SharePoint from the list, and turn the Config Only toggle on.
SharePoint connector form with the Config Only toggle on
  1. Under Authentication Type, select Custom OAuth.
Authentication Type options on the SharePoint config connector
  1. Enter the SharePoint site URL, and the Client ID and Client Secret of your app.
  2. (Optional) Turn Multi User Connector on only if you want to use multiple SharePoint config connectors to reach multiple SharePoint environments.
  3. Click Create.

Next step​

Return to Use SharePoint in ChatLLM. Users who had already connected SharePoint must reconnect it from Profile → User Connectors so their connection uses your app.