SharePoint Online Connector Configuration (Modern Auth)

This article describes the steps needed for configuring the SharePoint Online Connector (SPOC).

If you have not yet created an App Registration, please follow the steps found here before proceeding to configuration options.

1. Login to SPOC (Web Interface Access)

• Prior to accessing the SPOC Web Interface, an administrator account must be set up with Gimmal Professional Services or the Technical Support teams.

• This administrator account must be used for the first login.

• This administrator account can be used to provision new users as well as manage any aspect of the connector.

• Administrator account information should be kept secure.

The URL to access Gimmal Hosted SPOC is based upon your Region and Deployment environment. Please see the table above.

1. Navigate to the correct URL (see table below) and log in into the SPOC web using the administrator account set up in conjunction with Gimmal Support.

2. Provision new administrator accounts as needed.
   

2. Configure Connection to Gimmal Records

This section configures the connection between the SharePoint Online Connector and Gimmal Records.

1. On the Admin Tab, choose Gimmal Records under Connection Configuration in the left panel (A)

2. Enter Configuration details:

   1. URL: Enter the correct URL for the Gimmal Records Manager Web (B) (See table below)

   2. *Username: The Username for the Gimmal Records Service Account (C)

   3. Password: The password for the Gimmal Records Service Account (D)

3. Click ‘Update’ to save the changes.

4. Proceed to the next section to configure the Microsoft Graph API connection.

Note the ‘Test’ button (E) can be used to validate the URL

*Service Accounts can be found and managed in the Gimmal Records Manager Web (aka Gimmal Records Core).

See Creating a Service Account for more details.

3. Configure Microsoft Graph API Connection in the SharePoint Online Connector

This section configures the connection to the Microsoft Graph API used to authenticate to SharePoint.

1. Click on ‘Microsoft Graph API’ in the left panel

2. Enter the Tenant ID and Client ID from the App Registration step:

   • Tenant ID: Your Azure AD Directory (tenant) ID (A)

   • Client ID: Your Azure AD Application (client) ID (B)
     

     

3. Click the ‘Save’ button (C)

4. An Upload Certificate button will appear. Click it to upload the .PFX version of the certificate file used during App Registration.

   1. Upload the .PFX certificate file created during App Registration using the ‘Select File’ button (A)

   2. Enter the certificate password (B)

      

   3. Click the ‘Upload’ button to complete the certificate upload (C)

   4. Verify the certificate thumbprint and expiration dates match the original (D)

5. Test Connection: Click “Test Connection” to validate authentication (E)

6. Save Configuration: Click ‘Update’ to save the settings (F)

Ensure the thumbprint of the uploaded certificate matches the thumbprint as listed in the App registration.

Troubleshooting

Authentication Failures

1. Verify Tenant ID and Client ID are correct

2. Check that the certificate is properly uploaded and not expired

3. Ensure app has required Microsoft Graph permissions