Loading
Salesforce now sends email only from verified domains. Read More
Salesforce Contracts
Table of Contents
Filter by (0)Add
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

            Search all of Salesforce Help
            Search all of Salesforce Help
            Configure a Microsoft Azure App and Create a SharePoint Site Using Guided Setup

            You are here:

            1. Salesforce Help
            2. Docs
            3. Salesforce Contracts

            Configure a Microsoft Azure App and Create a SharePoint Site Using Guided Setup

            Set up a Microsoft Azure app and create a SharePoint site to prepare for integration with Salesforce. This includes generating a client secret, configuring the necessary permissions, and creating a SharePoint site to enable document storage and sharing.

            Required Editions

            Available in: Lightning Experience
            Available in: Professional, Enterprise, Unlimited, and Developer editions.
            User Permissions Needed
            To access the Microsoft 365 and Azure Integration Guided Setup: CLM Admin User
            1. Access the Microsoft Azure Setup:
              1. In the guided setup, click Set Up a Microsoft Azure App to expand the step.
                Setting up a Microsoft Azure App
              2. Click Set up a Microsoft Azure App.
              3. To learn more about the setup, you can either:
                • See Documentation: Opens step-by-step documentation to guide you through app setup.
                • See Video: Watch a tutorial to understand the app setup process.
            2. Register a new app in Microsoft Azure:
              The integration user can register the app and configure API permissions, but only a Global Administrator can provide admin consent.
              1. Log in to your Microsoft Azure account.
              2. To go to App registrations, search for Azure AD B2C, click Manage, and select App registrations.
              3. Click New Registration and enter the details:
                • Enter a name for the app. For example, MicrosoftApp.
                • For supported account types, select Accounts in this organizational directory only (Salesforce -SFDC-CLM only - Single tenant).
                • Click Register.
              4. Note the Application (client) ID.
            3. Add permissions:
              1. Go to API permissions and click Add a permission > Microsoft Graph > Delegated permissions.
              2. In Select permissions, enter these permissions:
                • offline_access
                • openId
                • User.ReadBasic.All
                • Sites.Selected
                • mail.send
                • Sites.Read.All
                • User.Read
              3. Click … next to User.Read and select Remove, since the previous step provides the higher permission User.ReadWrite.All.
              4. Click Grant admin consent for {TenantName}, confirm the consent in the popup, and make sure that the status changes to Granted.
                The integration user can only register the app but can’t grant admin consent. You may be prompted to request consent from a Global Administrator, who will receive an email with the request details to provide the required consent. Whether this step is necessary depends on the security policies of the customer's Microsoft tenant. In some cases, consent may have already been granted or the tenant may allow users to grant consent without admin approval. You can check whether Admin consent is required by referring to the Admin consent required column under API permissions. After the permission is granted, the Status updates to Granted for Salesforce – {tenant name}.
            4. Add a client secret:
              1. Go to Certificates & secrets and click New client secret.
              2. In the Add a client secret window:
                • Enter a description (e.g., MicrosoftApp).
                • Select an expiration timeframe and click Add.
                • Copy and save the Client Secret Value immediately, as it cannot be retrieved later. If lost, you must create a new client secret.
            5. Create a new SharePoint site or use an existing Share Point site:
              The Microsoft Graph API returns only the SharePoint sites you’ve followed. To use an existing site, make sure you’re following it in SharePoint so it appears in the site list.
              1. To create a new site, log in to OneDrive and go to SharePoint.
              2. Click Create site | Team site.
              3. Enter a site name without any spaces, and click Next.
              4. Search for and select the admin user.
                Add only the Microsoft Admin as a member to maintain document security.
              5. Click Finish.
            6. Retrieve your SharePoint site ID
              1. Go to Graph Explorer and log in with your Microsoft credentials.
              2. Set the method to GET, API version to v1.0, and URL to: https://graph.microsoft.com/v1.0/me/followedSites
              3. Run the query and copy the id of the SharePoint site used for document storage.
            7. Grant Microsoft Azure app access to your SharePoint site
              1. In Graph Explorer, set method to POST and URL to: https://graph.microsoft.com/v1.0/sites/<site_id>/permissions Replace <site_id> with the ID.
              2. Replace <site_id> with the ID.
              3. Go to the Modify permissions tab and ensure Sites.FullControl.All consent is provided.
              4. In the request body, paste: 
                {
  "roles": ["write"],
  "grantedToIdentities": [{
    "application": {
      "id": "<Application_Id>",
      "displayName": "Salesforce App"
    }
  }]
}
              5. Replace <Application_Id> with the Client ID from the Azure App Registration's Overview tab.
              6. Go to the Headers tab and add: Content-Type: application/json.
              7. Run the query to assign permissions.
            8. Complete the step in the Guided Setup:
              1. Select the checkbox and click Mark as Done.
                The system automatically creates the Microsoft 365 Guided Setup Permission set when the admin completes the guided setup. It assigns the permission set only to the user who runs this guided setup.
             
            Loading
            Salesforce Help | Article