cancel
Showing results forย 
Search instead forย 
Did you mean:ย 

Sharepoint connection issues

matt-kruzicki
Deputy Chef II
Deputy Chef II

We are able to get the connection established using an authorized account, but as soon as we tried to test a recipe it would fail and break the Sharepoint connection. Some of our IT team is suspecting that it could be because MFA is required for all of our Sharepoint sites, but we arenโ€™t sure. We also werenโ€™t sure if we were setting it up correctly as the Workato KB article for Sharepoint is a little outdated.

The connection can be setup using an โ€œAuthorization code grantโ€ or โ€œClient credentialsโ€. We have been setting it up using the โ€œAuthorization code grantโ€, but it prompts for MFA each time. I attempted to set it up using the โ€œClient credentialsโ€, but I donโ€™t believe I have the correct โ€œCertificateโ€ and โ€œPrivate Keyโ€ that is required because it gives me a โ€œnot enough dataโ€ error. Even if we had the correct info for this, it looks like it may still prompt for MFA as you have to sign in with Microsoft still.

Long story short, do you think MFA would be causing the connection to break as soon as we try to test the recipe?

1 ACCEPTED SOLUTION

gary1
Executive Chef III
Executive Chef III

I've had problems like this this in the past, but MFA may not be the issue. 

When you authenticate a Microsoft account and give it the appropriate permissions,  a long-term token (aka "authorization code") is generated for use in API authentication. For API auth, only the token is required and MFA plays no part.

First step to creating the connection is to open an incognito/private browser window. If your browser is already logged into Microsoft using another account, it will automatically authenticate using that account (kind of annoying), so incognito is a must if you want to authenticate using a different account.

When creating the connection in Workato, select "Authorization code grant" but only fill out the subdomain and then click connect. This should open the pop-up with the Microsoft login. Enter your credentials, complete the MFA, and one of three things will happen:

  1. If the account you used is an admin, you can grant permissions for Workato in your Microsoft account. This will complete the entire process (and, behind the scenes, generate the authorization token needed for API auth).
  2. If the account you use is NOT an admin, you will need to request permissions. This will create a permission request in your Microsoft account that an admin must approve. (I don't remember exactly where it is on the Microsoft side.) Once an admin approves the request, repeat all of the above steps.
  3. If Workato was previously approved by your Microsoft admin, then everything should complete seamlessly.

Hopefully this info helps.

View solution in original post

1 REPLY 1

gary1
Executive Chef III
Executive Chef III

I've had problems like this this in the past, but MFA may not be the issue. 

When you authenticate a Microsoft account and give it the appropriate permissions,  a long-term token (aka "authorization code") is generated for use in API authentication. For API auth, only the token is required and MFA plays no part.

First step to creating the connection is to open an incognito/private browser window. If your browser is already logged into Microsoft using another account, it will automatically authenticate using that account (kind of annoying), so incognito is a must if you want to authenticate using a different account.

When creating the connection in Workato, select "Authorization code grant" but only fill out the subdomain and then click connect. This should open the pop-up with the Microsoft login. Enter your credentials, complete the MFA, and one of three things will happen:

  1. If the account you used is an admin, you can grant permissions for Workato in your Microsoft account. This will complete the entire process (and, behind the scenes, generate the authorization token needed for API auth).
  2. If the account you use is NOT an admin, you will need to request permissions. This will create a permission request in your Microsoft account that an admin must approve. (I don't remember exactly where it is on the Microsoft side.) Once an admin approves the request, repeat all of the above steps.
  3. If Workato was previously approved by your Microsoft admin, then everything should complete seamlessly.

Hopefully this info helps.