Show navigation

Configure a SharePoint connector with Modern Authentication

This topic describes the second part of the fifth configuration task in the process of setting up an Office 365 connector to use modern authentication.

Perform this task in the eCopy ShareScan Administration Console after you have successfully

• registered an Office 365 application for Token Vault at the Azure Active Directory admin center
• registered a SharePoint Online for <tenant> tenant connector in Token Vault
• added/registered a client in Token Vault,
• authorized Token Vault in SharePoint Online, and
• configured Token Vault settings in the ShareScan Administration Console under Advanced > Tools.

To configure a SharePoint eCopy connector with SharePoint Online and modern authentication, perform the following steps:

1. Select a destination of a SharePoint connector profile and open the Edit destination dialog.
2. Enter a Hyperlink pointing to a SharePoint Online location (e.g. https://test.sharepoint.com/sites/TestSite)
3. Select Enable modern authentication
4. Type in User name (in the DOMAIN\username format) and Password to specify the user. IMPORTANT: verify that this user has previously authorized Token Vault for SharePoint Online for “<tenant>”. This <tenant> is the same as the one that belongs to the SharePoint Online location that you specified in Hyperlink - see above.
5. Click Test. (If the above authorization was not completed before the test, the test fails.)
6. At this point you are ready to invite your end-users to carry out their own authorization step at the Token Vault User page. Once this end-user authorization step is complete, the use of modern authentication in the supported connectors is operational.

WARNING: When you configure a destination with

• Enable modern authentication turned ON,
• Search while typing option turned ON and
• 'Runtime' Logon mode

but your Active Directory Domain Services (AD DS) user accounts are NOT synchronized to the Azure Active Directory (Azure AD) of your Office 365 subscription, then searching the SharePoint connector Authentication form runtime for users will display internal Office 365 users. And because these users are not domain users in the on-premise Active Directory, they cannot be authorized in Token Vault for SharePoint Online. Therefore runtime authentication fails for these users.