note
If you are interested in purchasing Nightingale’s SharePoint integration please reach out to us. Please note that your client files will need to sit in the root directory of your SharePoint site, and each folder name per client needs to follow a defined convention of [FIRSTNAME] [space] [LASTNAME]. For example: JOE BLOGGS
These are the steps you need to follow to set up your Microsoft Entra to connect to Nightingale for the SharePoint integration.
note
If you will be using the SharePoint integration alongside the SSO integration, please make sure to read the additional instructions in the article below:
Azure Configuration
For this section, you will need someone with admin-level access to your Azure tenant.
In Microsoft Azure, open Microsoft Entra ID. Then perform the following:
App Registration
- In the left-side panel, select “App registrations”, in the “Manage” section
- Select “New registration” up the top of the page to create a new app registration
-
In the “Overview” page for your new app registration, note down the following values for later:
- Application (client) ID
- Directory (tenant) ID
Secret
- In the new App Registration, click “Certificates and Secrets” in the “Manage” section of the left-side panel
-
Click “New client secret” on this page. A panel will open on the right where you can give the new Secret a description and an expiry date
-
The expiry is up to you, but consider the following competing concerns:
- When the secret expires, the integration will stop working until you provide us with a new secret - they cannot be renewed
- Refreshing more often means that if any secret does get into unauthorised hands, it won’t stay live for them for long
-
The expiry is up to you, but consider the following competing concerns:
-
Once you create the secret, note down the following for later:
- The value in the Value column - this will not be accessible later so copy it now
- If you do miss the chance to copy the secret value, you can delete the secret and make a new one
API permissions
- Still in the new app registration, go to API permissions, also in the “Manage” section of the left-side panel
-
Click on “Add a permission”. This will open up a panel on the right which looks like this:
- Choose “Microsoft Graph” and then “Application permissions”
-
Scroll down the list of permissions until you get to “Files”. Expand this section, and select the “Files.ReadWrite.All” option:
- Click on “Add permissions” at the bottom of the panel to add this permission to the “Configured Permissions” list.
-
Finally, you need to click “Grant admin consent for [Your Entra Tenant Name]”. It is greyed out in the screenshot below due to access restrictions, but for an admin, they will be able to click this button to allow the application to make use of the new permission:
It is important to note that this permission will allow this app registration access to all files and folders in your SharePoint - not just on the SharePoint site you choose for the integration to use. Be careful with the app details, and especially the secret value you generated!
What to Send to Nightingale
The following information you have noted down from the previous steps:
- Application (client) ID
- Directory (tenant) ID
- Secret Value
And also:
-
The URL for the SharePoint Site which does or will contain all of your client folders
- This should look like [your Org].sharepoint.com/sites/[your Site]
- All of your client folders will have to be created in the same site for this integration
- If you do not want to use the default document library in that SharePoint site, you can (optionally) give us the Name of the library you would like to use instead
Comments
0 comments
Article is closed for comments.