With the LTS release 3.2.11, Squirro provides a 1-click connector for Microsoft SharePoint. This connector allows the Project Creators to connect to a Microsoft Azure account and index the Microsoft SharePoint data into Squirro.

Table of Contents

• Set up connector

• OAuth Configuration

  • App Config

  • Apply for Production

  • Squirro configuration

Set up connector

• Head over to the Enterprise tab on the Data screen as shown in the screenshot below.

...

• Click on the Microsoft SharePoint icon. Squirro will show a prompt asking you to authenticate your Microsoft Azure account. Click on the Authenticate button there.

...

• Once you click on the Authenticate button, you will be re-directed to the Sign-in screen hosted by Microsoft.

...

• Once you sign-in you will be prompted to approve Microsoft SharePoint scopes. This screen is presented to you by Microsoft asking you to provide consent for your Microsoft SharePoint data to Squirro.

...

• After approving scopes you will be brought back to Squirro’s source configuration screen. This screen shows which Microsoft account Squirro has connected to.

...

• Now, you can click Save & Exit for Squirro to automatically configure the mapping of item fields and facets, as well as any other required source configuration.

• Alternatively you can define those settings manually by clicking Next and going through the whole source setup process. This allows you the full flexibility of how the Microsoft SharePoint data should be mapped to Squirro items.

• After clicking on Save & Exit, you will see your source running. Sit back, relax & enjoy while we index your Microsoft SharePoint data into Squirro.

...

OAuth Configuration

App Config

...

• Go to Microsoft Azure Portal here: https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationsListBlade, and click on the Register an application button.

...

• On the next screen, choose the following options as shown in the screenshot below and then click on Register button:

  • Name: Name of the app

  • Supported account types: “Accounts in any organizational directory (Any Azure AD directory - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox)”

  • Redirect URI: This is the URL Microsoft will redirect the user to after successful authorization. This needs to be set to https://<your-server-url>/dataloader/sharepoint_plugin/pl/azure/authorized on your server.
    For example: https://squirro.example-company.com/dataloader/sharepoint_plugin/pl/azure/authorized.

...

• The next step is to add scopes to the app. To do that go to the API permissions tab and click Add a permission button.

...

• On the next screen click Microsoft Graph button.

...

• Next go to the Delegated permissions section.

...

• On the next screen add the following scopes:

  • email

  • offline_access

  • Files.Read.All

  • GroupMember.Read.All

  • Sites.Read.All

  • User.ReadBasic.All

  • User.Read.

• After adding scopes, confirm your choices by clicking Add permissions button.

...

• In the next step go to the Token configuration tab, click Add optional claim button and add new claim:

  • Token type: “ID”

  • Claim: “email”.

...

• The final step is to create a Client secret key for your app. To do that go to the Certificates & secrets tab, click New client secret button and add a key:

  • Description: Name of your key (could be whatever you want)

  • Expires: Period of time after your secret key will expire (max period of time is 24 months).

...

Apply for Production

Unverified apps will show a warning about unverified status during the user authorization process when the users connect their Squirro instance to their Microsoft account. To avoid that, you have to apply for Production status of the Microsoft SharePoint app.

To start that process you first have to configure the Branding. This will require a logo icon, homepage URL, links to your terms of service and privacy policy. For more information go to the link: https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-configure-publisher-domain.

Squirro configuration

After having created the OAuth2 app on the Microsoft Azure portal, you need to configure the Client ID and the Client Secret on your Squirro instance.

• Go to the Overview tab of the app and copy Application (client) ID.

...

• Next switch to the Certificates & secrets tab and copy the value of your Client Secret key.

...

• Edit /etc/squirro/common.ini on your Squirro cluster and add the following lines:

[dataloader]
sharepoint_client_id = YOUR_ID
sharepoint_client_secret = YOUR_SECRET

• To enable org-wide access scopes used by your app also add the following line to the [dataloader] header:

sharepoint_org_scopes_enabled=true

• If the [dataloader] header is already present in this file, add the lines to the existing section. The section header can not appear more than once in the configuration file.

• Restart the frontend & datasource service to apply the settings:

...

This page can now be found at Microsoft Sharepoint Connector on the Squirro Docs site.