SharePoint (Microsoft) Integration

With these Public Integrations, you can create Word, PowerPoint, and PDF documents, as well as upload images and manage files in SharePoint.

• com.globant.geai.sharepoint_create_word: Creates a new Word document and stores it in the specified SharePoint folder.
• com.globant.geai.sharepoint_create_ppt: Creates a new PowerPoint presentation and stores it in the specified SharePoint folder.
• com.globant.geai.sharepoint_create_pdf: Creates a new PDF document and stores it in the specified SharePoint folder.
• com.globant.geai.sharepoint_upload_image: Uploads images from public URLs.
• com.globant.geai.sharepoint_read_file: Reads and retrieves the content of a specific file stored in SharePoint.
• com.globant.geai.sharepoint_list_files: Lists all files and documents contained within a specified SharePoint folder.

Before using the Tools, you must register your SharePoint credentials as a Secret in your Project.

Authentication modes

The SharePoint Integration supports two authentication modes, depending on whether user interaction is required. The mode configured in Integration Parameters defines how the connection to SharePoint is established.

• Authorization Code (User login): Requires the user to sign in and grant consent. Use this mode when actions must be performed on behalf of a user and depend on their permissions.
• Client Credentials (No login): Uses application-level authentication without user interaction. Use this mode when the Integration must run independently, such as in automated or backend processes.

Configuration steps

1. In Console, open the Project where you will use this Integration and create two different Secrets. Follow the steps in How to create a Secret.
   • Create one Secret for the Client ID:
     • Name: Enter a descriptive name (for example, sp_client_id).
     • Value: Paste the Application (client) ID obtained from your Microsoft app registration in Microsoft Entra ID (Azure AD). This value identifies the registered application.
     • Confirm to save the Secret.
   • Create another Secret for the Client Secret:
     • Name: Enter a descriptive name (for example, sp_client_secret).
     • Value: Paste the Client Secret value generated in the same Microsoft app registration under Certificates & secrets.
     • Confirm to save the Secret.
2. In the Integrations Dashboard, open SharePoint (Microsoft) and go to the Integration Parameters tab. Configure the following values:
   • securityScheme.flows.authorizationCode.clientId: Enter the name of the Secret created for the Client ID (for example, sp_client_id).
   • securityScheme.flows.authorizationCode.clientSecret: Enter the name of the Secret created for the Client Secret (for example, sp_client_secret).
   • sharepoint-url: Enter your SharePoint site URL (for example, https://globant-team.sharepoint.com/sites/Marketing). This value is not stored as a Secret.
     The URL must follow this structure: https://<organization>.sharepoint.com/sites/<your-site>
     • Replace <organization> with your Microsoft 365 tenant name (the text before .sharepoint.com in the SharePoint URL).
     • Replace <your-site> with the short name of the site (the segment after /sites/ or /teams/).
   • Then, configure one of the following authentication options.

     • Authorization Code (User login)

       • securityScheme.authLevel: Set to User.
       • securityScheme.flows.authorizationCode.authorizationUrl: https://login.microsoftonline.com/<tenant-id>/oauth2/v2.0/authorize
         • <tenant-id> must be replaced with your Microsoft Entra ID tenant identifier. You can use either:
           • The Tenant ID (GUID) from your app registration
           • Your tenant domain (for example, contoso.onmicrosoft.com)
       • securityScheme.flows.authorizationCode.scopes: ["openid", "profile", "offline_access"]
         • These are the basic scopes required for authentication.
         • You can add additional scopes depending on the permissions your application needs in Microsoft Graph.
       • securityScheme.flows.authorizationCode.tokenUrl: https://login.microsoftonline.com/<tenant-id>/oauth2/v2.0/token

     • Client Credentials (No login)

       • securityScheme.authLevel: Set to Project
       • securityScheme.flows.clientCredentials.scope: https://graph.microsoft.com/.default
       • securityScheme.flows.clientCredentials.tokenUrl: https://login.microsoftonline.com/<tenant-id>/oauth2/v2.0/token
         • <tenant-id> must be replaced with your Microsoft Entra ID tenant identifier. You can use either:
           • The Tenant ID (GUID) from your app registration
           • Your tenant domain (for example, contoso.onmicrosoft.com)
3. In the same Integration, go to the Tool Parameters tab and configure the following parameter for the Tools that create, upload, or list files:
   • path: Required parameter. Defines the folder path within SharePoint where the file will be created, uploaded, or where files will be listed (for example, /sites/<your-site>/Shared Documents/<folder>).
     The Tool com.globant.geai.sharepoint_read_file does not require configuration in the Tool Parameters tab.

After completing these steps, you can add the SharePoint Tools to your Agent from the AI & Tools Tab.