Registering an Azure Application for SharePoint Repositories

Before you configure a PeopleSoft URLID for a SharePoint repository, you must register an application in Microsoft Entra ID, formerly Azure Active Directory. PeopleSoft uses this application registration to authenticate with Microsoft Graph and access the SharePoint site and document library that store files.

The registration process provides the values that you enter later on the PeopleSoft URL Maintenance and URL Properties pages, including the client ID, client secret, tenant ID, and SharePoint-related connection properties. You must have access to the Microsoft Azure portal and the required permissions to register applications and grant administrator consent for Microsoft Graph API permissions. See Defining SharePoint Repositories.

Registering the Application

To register an application for PeopleSoft access to SharePoint:

1. Sign in to the Microsoft Azure portal.
2. In the left menu, select Azure Active Directory or Microsoft Entra ID.
3. From the Manage section, select App registrations.
4. Select New registration.
5. Enter the application registration details.
   • Name
   • Supported account types
   • Redirect URI

     For PeopleSoft server-to-server (client credentials flow), you don’t need this. You can leave it blank or use https://localhost as a placeholder.

6. Select Register.
7. Make a note of the Application (client) ID and Directory (tenant) ID for use in the next process.

Creating a Client Secret

PeopleSoft uses the client secret value with the client ID and tenant ID to obtain an access token from Microsoft Graph. To create a client secret for the registered application:

1. In the registered application, select Certificates & secrets.
2. Under Client secrets, select New client secret.
3. Enter the client secret details.

   Enter a description and expiration period.

4. Select Add.
5. Copy the client secret Value immediately.

Assigning Microsoft Graph API Permissions

An Azure administrator must grant admin consent before PeopleSoft can use the application registration to access SharePoint.

To assign Microsoft Graph permissions for allowing registered application to access SharePoint:

1. In the registered application, select API permissions.
2. Select Add a permission.
3. Select Microsoft Graph.
4. Select Application permissions.
5. Expand Sites.
6. Select the required permission.

   For example, Sites.Selected is recommended as giving the least access.

   Files.ReadWrite.All gives broader access and is not recommended.

7. Select Add permissions.
8. Select Grant admin consent.

Values Needed for PeopleSoft Configuration

After completing the Azure application registration, collect these values before configuring the PeopleSoft URLID:

• CLIENT ID
• CLIENT SECRET
• TENANT ID