To generate the Access Control Lists (ACLs) that are necessary to support mapped security, the connector might need to resolve SIDs into user and group names.
LdapServer
, LdapPort
, LdapUsername
, and LdapPassword
configuration parameters in your fetch task.To use the Microsoft Graph API, you must go to the Azure portal and register an application to represent the connector. Full instructions about how to create an application are available in the Microsoft documentation.
The SharePoint OData Connector has the following requirements:
http://localhost:7878/oauth
). The "type" of the redirect URI should be "Web".API Permissions. The connector requires the following delegated permissions:
Directory.Read.All
offline_access
To resolve SIDs through the Graph API
oauth_tool.cfg
in a text editor. In the [Default]
section, specify any SSL or proxy settings required to access the Graph API:
SSLMethod
|
The version of SSL/TLS to use. |
ProxyHost
|
The host name or IP address of the proxy server to use. |
ProxyPort
|
The port of the proxy server to use. |
In the [OAuthTool]
section, set the following parameters:
AppKey
|
The application key you obtained when you created the application to represent the connector. |
AppSecret
|
The application secret you obtained when you created the application to represent the connector. |
NOTE: If you are using a single-tenant Azure Active Directory you might need to specify your tenant ID in the AuthorizeUrl
and TokenUrl
parameters (replace the value "common").
Open a command-line window and run the following command:
oauth_tool.exe oauth_tool.cfg OAuthTool
Your default web browser opens to the Microsoft web site.
Authorize the application to access the API.
Microsoft provides the OAuth tokens, and the OAuth configuration tool creates a file named oauth.cfg
. This contains the tokens that the connector requires to authenticate.
Include the OAuth tokens in each of your fetch tasks. For example, you can modify the connector configuration file as follows:
[MyTask1] < "oauth.cfg" [OAUTH]
For more information about including parameters from another file, see Include an External Configuration File. The OAuth tool also prints the parameters it has set to the command-line window so that you can set these directly in the connector's configuration file if you prefer.
|