(Example) How to Get the Access Token Credentials from SharePoint for Microsoft 365

Other Examples

• (External) AgilePoint Intelligent Process Automation App for SharePoint Online
• (Example) Create a SharePoint Access Token
• Examples - Step-by-step use case examples, information about what types of examples are provided in the AgilePoint NX Product Documentation, and other resources where you can find more examples.

Prerequisites

• 2 self-signed certificates in PFX and CER format.
  • PFX - The file must be in .pfx format and requires a password.
  • CER - The file must be in .cer format.

  For help creating a self-signed certificate, contact AgilePoint Professional Services.

• These access rights for AgilePoint NX Portal:
  • Enable Manage Center Access
  • Add, Remove, And Modify Global Application Resources

  For more information, refer to:

  • Roles
  • (Example) Add a Role
• A SharePoint site in SharePoint for Microsoft 365.
• Credentials with one of these permissions for Microsoft Azure:
  • microsoft.directory/applications/createAsOwner
  • microsoft.directory/applications/create
• One of these Microsoft 365 account types:
  • Microsoft 365 Business
  • Microsoft 365 Enterprise

Good to Know

• This example shows how to create an access token for SharePoint for Microsoft 365. This topic does not apply to SharePoint on-premises.
• This example shows how to create the SharePoint access token with OAuth 2.0 Authentication using the Azure AD App Only option.
• OAuth 2.0 access tokens require a 2-way exchange of credentials between AgilePoint NX and the external service. This means that you must get the credentials from the third-party service to paste in the AgilePoint NX access token, and get the redirect URI from AgilePoint NX to paste in the external service. This requires you to open both the AgilePoint NX access token and the third-party service at the same time, so you can copy and paste from one screen to the other.

  This topic shows the suggested procedure for SharePoint. The exact procedure for your access token depends on whether you already have a connection (usually called an app) configured in the external service.

• This topic gives one example. The procedure may vary depending on your configuration and account settings in the third-party service.
• Some information about third-party integrations is outside the scope of the AgilePoint NX Product Documentation. It is the responsibility of the vendors who create and maintain these technologies to provide this information. This includes specific business use cases and examples; explanations for third-party concepts; details about the data models and input and output data formats for third-party technologies; and various types of IDs, URL patterns, connection string formats, or other technical information that is specific to the third-party technologies. For more information, refer to Where Can I Find Information and Examples for Third-Party Integrations?

First, create a new access token in AgilePoint NX for SharePoint.

How to Start

• There is more than one way to create an access token.

  For more information, refer to Access Token for SharePoint.

Procedure

1. In AgilePoint NX, open the access token configuration screen for SharePoint.

   
   
   

   Do not configure the access token credentials.

   Keep the access token configuration screen open in AgilePoint NX, but do not save it.

Next, create an app in Microsoft Azure for SharePoint.

Prerequisites

• Credentials with one of these permissions for Microsoft Azure:
  • microsoft.directory/applications/createAsOwner
  • microsoft.directory/applications/create

How to Start

1. In a new web browser tab, sign in to Microsoft Azure Portal with Microsoft 365:
   • https://portal.azure.com.

Procedure

1. On the Microsoft Azure Portal screen, click App registrations.

   
   
   

2. On the App registrations screen, click New registration.

   
   
   

3. On the Register an application screen, in the Name field, enter an app name.

   AgilePoint recommends you use an app name associated with your AgilePoint NX app or the way you want to use the app in AgilePoint NX.

   
   
   

4. On the Supported account types section select the value that is associated with your AgilePoint account.

   
   
   

5. Click Register.

   
   
   

   The Employee Onboarding App screen shows the client ID and the tenant ID.

   
   
   

Next, copy the client ID and tenant ID from the SharePoint App in Microsoft Azure to your AgilePoint NX access token.

Procedure

1. In Microsoft Azure, to copy the client ID, on the Employee Onboarding App screen, hover your cursor over the Application (client) ID field, and click Copy to clipboard.

   
   
   

2. In AgilePoint NX, on the SharePoint Access Token screen, in the Client ID field, paste the Application (client) ID value from Microsoft Azure.

   
   
   

3. In Microsoft Azure, to copy the Tenant Name, hover your cursor over the Directory (tenant) ID field, and click Copy to clipboard.

   
   
   

4. In AgilePoint NX, on the SharePoint Access Token screen, in the Tenant Name field, paste the Directory (Tenant) ID value from Microsoft Azure.

   
   
   

Next, configure the certificate for the SharePoint app.

Prerequisites

• A self-signed certificate in .cer format.

  For help creating a self-signed certificate, contact AgilePoint Professional Services.

Procedure

1. On the Employee Onboarding App screen, click Manage > Certificates & secrets.

   
   
   

2. On the Certificates & secrets screen, click Certificates.

   
   
   

3. On the Certificates tab, click Upload certificate.

   
   
   

4. On the Upload Certificate screen, in the Upload a certificate (public key) with one of the following file types: field, click Select a file.

   
   
   

5. Select a certificate from the local machine.

   
   
   

6. Click Add.

   
   
   

   The Certificates & secrets screen shows the certificate.

   
   
   

Next, configure the API permissions for your SharePoint app.

Procedure

1. On the Employee Onboarding App screen, in the Manage section, click API permissions.

   
   
   

2. On the API permissions screen, in the Configured permissions section, click Add a permission.

   
   
   

3. On the Request API permissions screen, in the Microsoft APIs tab, click SharePoint.

   
   
   

4. On the SharePoint section, in the What type of permissions does your application require? field, click Application Permissions.

   
   
   

5. In the Select permissions section, select Sites.FullControl.All.

   
   
   

6. Click Add Permissions.

   
   
   

7. On the API permissions screen, click Grant admin consent for AgilePoint.

   
   
   

8. Click Yes.

   
   
   

   The API permissions screen shows the SharePoint permission.

   
   
   

Next, configure the SharePoint site URL from SharePoint to your AgilePoint NX access token.

How to Start

1. In one web browser tab, in SharePoint for Microsoft 365, open the SharePoint site.

   
   
   

2. In a different web browser tab, in AgilePoint NX, open the SharePoint access token configuration screen.

Procedure

1. In SharePoint for Microsoft 365, on the SharePoint site, copy the URL for the SharePoint site.

   This is an example value. In a production environment, copy the actual Site Collection URL from SharePoint site.

   
   
   

2. In AgilePoint NX, on the SharePoint Access Token screen, in the Site Collection URL field, paste the URL value from SharePoint for Microsoft 365.

   
   
   

Next, complete the AgilePoint NX access token configuration for SharePoint.

Prerequisites

• A self-signed certificate in .pfx format and requires a password.

  For help creating a self-signed certificate, contact AgilePoint Professional Services.

Procedure

1. In AgilePoint NX, on the SharePoint Access Token Configuration screen, in the Token Name field, enter a name for the access token.

   
   
   

2. In the Certificate field, click Upload file.

   
   
   

3. Select a certificate from the local machine.

   
   
   

4. In the Certificate Password field, enter the password for the certificate.

   
   
   

5. Click Test Connection.

   
   
   

   If the connection is successful, a confirmation message shows.

   
   
   

6. Click Save.