Configuring SharePoint Online connector in Dashboard

Steps

Note: You can connect using one of two available methods:

  • Connect using SSO
  • Provide pre-configured access keys manually.

Follow the steps below and choose the method that best suits your requirements.

Navigate to Administration > Data Sources > SharePoint Online > New Credentials.

Click on New Credentials.

You will see two available options:

  • Connect using SSO
  • Provide pre-configured access keys manually.

Method 1: Connect using SSO

  1. Click on Connect using SSO.

  2. Enter the Credential name and click AUTHORIZE VIA SHAREPOINT ONLINE.

  3. It will redirect you to select your Microsoft account.
  4. Once you select, it takes you to the Permission Page. Provide your consent and click Accept.
  5. The system will validate and authorize your credentials. It will redirect you to the Create Scan Configuration page to setup the scan by following steps 5 to 8 (shown after Method 2 configuration procedure).

    Note: Your authentication method will be displayed in the credentials list menu.

Method 2: Provide Pre-configured Access Keys Manually

Follow the below steps when you already have pre-configured access keys:

  1. Navigate to Administration > Data Sources > SharePoint Online > New Credentials.
  2. Select Provide pre-configured access keys manually option.
  3. Provide the Credentials name, Directory (tenant) ID, Application (client) ID, and Client Secret Value, generated in the previous sections from the azure application.
  4. After entering the values, you can either just SAVE & CLOSE or you can proceed onto creating a scan configuration by clicking SAVE & CREATE SCAN.
  5. On the tab Scan configurations, click New Configuration, next enter the Name, and Credentials created in above steps. In the Path field, select the Folder icon to select a particular sites to scan, or leave the path as empty to scan all sites.
    For the fields:
    • Subscribe to events streaming (DDR): If selected, then the system will automatically handle the subscription to SharePoint Onlineʼs real-time events.
    • Fetch Cloud Labels: If selected, then sensitivity (AIP) and custom labels will be fetched for each file discovered in the scan. This data will be available in Cloud Labels field in Enterprise search. However, enabling this option slows down the scan.
    • Fetch Permissions: If selected, then permissions will be fetched for each file discovered in the scan. This data will be available in:
      • Anyone With Link and External Shared Link fields in Enterprise search (if a file is shared correspondingly).
      • Permissions tab of the sidebar in Enterprise search.
      • Risk field (it is calculated based on the permissions and the classification of the file).
    However, enabling this option slows down the scan. An example is shown below:
    Note: Earlier versions of the product Fetch Cloud Labels and Fetch Permissions options were enabled by default and hidden under Optional Settings. If scans take longer to run you need to check these settings and edit the scan configuration and disable these options if necessary.
  6. Next, click SAVE & CLOSE to just save the configuration or you can start the scan by clicking START FILE SCAN.
    You can also edit the scan configuration created above later using Edit Configuration. For example, if you observe that you scans are running slow, you can go to the edit view and disable the options Fetch Cloud Labels and Fetch Permissions. An example is shown below:

  7. If you have created scan configurations previously, they will be listed under the Scan configurations tab. To run one of the previously created configurations, click on the icon on the right and select START FILE SCAN to begin scanning.
  8. The results can be viewed under Dashboard > Enterprise Search.