Sharepoint authentication types

Question

Hi, 
 we need to make an integration with SharePoint Online, in form of single system login, with Appian 21.4 
 The customer after done the configuration on SharePont, gave us a PFX certificate and no client secret. 
 But as I read on Appian documentation the "certificate authentication" is an alternative to Client Secret authentication which is needed by Sharepoint Connected System on Appian. 
 So we need the customer to configure following "Granting access using SharePoint App-Only" ( https://learn.microsoft.com/en-us/sharepoint/dev/solution-guidance/security-apponly-azureacs) 
 and not "Granting access via Azure AD App-Only". 
 Is what I say correct? 
 Is there a way to configure a SPO integration on Appian by using the certifcate authentication? 
 Thanks

Antonino Guglielmino · Accepted Answer

Hi Gabriele, we had the same problem and we resolved it in this way: In order to generate the client assertion ( https://learn.microsoft.com/en-us/entra/msal/dotnet/acquiring-tokens/web-apps-apis/confidential-client-assertions), it's a JWT, ( https://jwt.io/introduction ) needed to retrieve the token from Microsoft IDP ( learn.microsoft.com/.../v2-oauth2-client-creds-grant-flow ), we created an Appian Plugin Function ( docs.appian.com/.../Custom_Function_Plug-ins.html ) that creates the Json Web Token. Then we used HTTP integrations to create folders/documents, check if a folder exists and so on. We used the REST API following the official Microsoft documentation ( https://learn.microsoft.com/en-us/sharepoint/dev/sp-add-ins/working-with-folders-and-files-with-rest ). It is not possible to use the OOTB connected system because it requires the parameter "client secret", but this parameter is not used in "Azure AD app for app-only access".

Sharepoint authentication types

Top Replies