This is version 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 . It is not the current version, and thus it cannot be edited.
[Back to current version]   [Restore this version]

1. Sharepoint Microsoft Graph REST API based integration.
#

Remote item name: Sharepoint

!!!Constraint: Microsoft Graph REST API does not support stream upload. In order to integrate with CrushFTP the files are temporary stored as local file (CrushFTP install folder/sharepoint/) during the upload.
Proxy: If your server's internet connection uses proxy server. You need to whitelist domains : login.microsoftonline.com, graph.microsoft.com

Go to the Microsoft Azure portal: https://azure.microsoft.com/en-us/features/azure-portal/

Application registration: Go to the App registrations and click on New registration:



Name it. Select the Multitenant and personal Microsoft accounts type. The redirect url must ends with: register_microsoft_graph_api/. Then click on register.



Under the redirect url configuration enable the Access Token to be issued by the authorization endpoint:



API permission: You also need to provide permission for the Microsoft Graph. Go to the Api permission. Click on Add permission, and select Microsoft Graph.

1.1 Application Permission:
#

It permits a Server to Server Authentication.

1.2 Delegated permission:
#

Client id : You can find it at Azure portal -> App Registration -> Overview:



Secret key : A new client secret needs to be created as well. Go to the "Certificate & secrets" and generate a new secret key. Click on New client secret.




SharePoint remote item settings:

!!! CrushFTP admin page url must match the redirect url. In our example : http://localhost:9090

Select SharePoint item type and click on "Get Refresh Token" button. Provide the Client ID and Client Secret Value (not ID, see the screenshot), and Tenant (in almost all cases it is just: common).



Click on "OK" button, log in with your azure credentials, allow CrushFTP to have access to your SharePoint files. After that the form will disappear and the username and password will be filled. Done.



Sharepoint specific settings:



Site id : The sharepoint domain name.
Site Path : The path of the SharePoint site. It should start and end with slash.
Drive name : Each SharePoint site has document library where the site related files are stored. See https://support.microsoft.com/en-us/office/what-is-a-document-library-3b5976dd-65cf-4c9e-bf5a-713c10ca2872 Provied it's name
Folder : Relative path of the document library of the sharepoint site.
Conflict Behaviour:
- Rename the file/folder if already exits
- Replace the file/folder if already exits
- Fail if the file/folder already exists

2. SharePoint REST service API based integration
#

Remote item name: Sharepoint2

More info : https://docs.microsoft.com/en-us/sharepoint/dev/sp-add-ins/get-to-know-the-sharepoint-rest-service?tabs=csom
!!!Constraint: On newer Sharepoint (after 2019) Grant App permission is disabled by default. To enable Custom Application APP Authentication run the following PowerShell commands:

Install-Module -Name Microsoft.Online.SharePoint.PowerShell
$adminUPN="<SharePoint administrator account>"
$orgName="<name of your Office 365 organization>"
$userCredential = Get-Credential -UserName $adminUPN -Message "Type the password."
Connect-SPOService -Url https://$orgName-admin.sharepoint.com -Credential $userCredential
get-spotenant | Select DisableCustomAppAuthentication
set-spotenant -DisableCustomAppAuthentication $false

Or

$creds = Get-Credential
$orgName="<name of your Office 365 organization>"
Connect-SPOService -Url https://$orgName-admin.sharepoint.com -Credential $creds
get-spotenant | Select DisableCustomAppAuthentication
set-spotenant -DisableCustomAppAuthentication $false

Advantage(Compared with MSGraph API): Stream upload supported. There is no temporary stored local file during the upload.

1. Register Add-In
Navigate and login to SharePoint online site. Got to Register Add-In page by entering the url as:

https://<sitename>.sharepoint.com/<<site path>>/_layouts/15/appregnew.aspx

Click Generate button.



Store the Client ID and Client Secret and click on Create button.



2. Grant Permissions to Add-In

Navigate to:

 https://<sitename>.sharepoint.com/<<site path>>/_layouts/15/appinv.aspx

This will redirect to Grant permission page. Enter the Client ID(generated earlier), in AppId textbox and click Lookup button.
Provide the permission Request xml and click on Create button.

Permission Request XML content:

<AppPermissionRequests AllowAppOnlyPolicy="true">
	<AppPermissionRequest Scope="http://sharepoint/content/sitecollection/web" Right="FullControl"/></AppPermissionRequests>

SharePoint2 remote item settings:

User name : The created Client ID
Password : The created Client Secret
Site id : The sharepoint domain name.
Site Path : The path of the SharePoint site. It should start and end with slash.
Drive name : Each SharePoint site has document library where the site related files are stored. See https://support.microsoft.com/en-us/office/what-is-a-document-library-3b5976dd-65cf-4c9e-bf5a-713c10ca2872 Provide its name
Folder : Relative path of the document library of the sharepoint site.