Add A SharePoint Storage

In order to integrate Microsoft SharePoint service with MetaDefender for Secure Storage you will be required to create an application registration, assign the necessary permissions and then generate a secret key. Please follow these steps:

1. From the left side menu, navigate to Storage units and from the Cloud Storage tab, choose Add SharePoint Storage.
2. 
3. Give your storage a name so you can easily identify it later.
4. Enter your Tenant ID. Scroll to the end of this page for more details.
5. Enter your Client ID. Scroll to the end of this page for more details.
6. Enter your Client Secret. Scroll to the end of this page for more details.
7. Enter the name of a site you wish to process files and folders.
8. Enter the name of a Document Library if you wish to process files and folders from a specific Document Library. This is optional. In case is not provided, we will process the files and folders from all the Public Document Libraries (we do not scan the private ones) that belong to the Site provided at step 6.
9. Enter the name of a Folder if you wish to process files and folders only from a specific folder, inside a specific Document Library. To be able to add a folder location, you need to provide a Document Library (step 7). Once a Document Library is provided, a new box with Folder location will appear on the form.
10. Select Add in order to finish the process. If the data you entered is valid, a new SharePoint storage will be created. If is not valid, a specific error message will inform you.

How to create a SharePoint application

In order to process your SharePoint files and folders with MetaDefender for Secure Storage you will be required to add a new app registration in your Active Directory Azure Portal

1. Log in to Azure Portal and from the left navigation menu choose Azure Active Directory

2. Make a copy of the Tenant ID from the overview page

3. From the left side menu choose App registrations

4. Click New registration

5. Give your app a name so you can easily identify it

6. There is no need to modify the other properties. When ready, please click Register.

7. From the Overview page of your newly created application, make a copy of Application (client) ID

8. You now need to specify which permissions should the application have. To do this, please navigate to API permissions from the left-side menu

9. Click Add a permission

10. 

11. Select Microsoft Graph from the right-side menu

12. Select Application permissions

13. In order for MetaDefender for Secure Storage to correctly work please add the following permissions:

    1. Files.ReadWrite.All
    2. Sites.Read.All

14. When ready, click Add permissions

15. We need to grant admin consent for the added permissions

16. Now that the required permissions are in place, you are ready for the final step. Please navigate to Certificates & secrets from the left-side menu

17. Click New client secret and make sure that it will not expire as long as MetaDefender for Secure Storage is using it.

18. Click Add and then you will need to make a copy of the generated secret key because it will not be available later

19. Now that you have the Tenant ID, the Client ID and the Client Secret Key you can go back in MetaDefender for Secure Storage and finish the SharePoint integration. Congratulations!