Specifications
You can configure the connector using either of the following authentication methods:
- Sign in with Microsoft
- Azure App Registration (OAuth 2.0 Client Credentials)
Prerequisites
Before configuring the SharePoint connector, ensure that:- You have a Microsoft 365 tenant with SharePoint Online and access to the SharePoint sites that you want to index.
- For authentication:
- You have permission to create Azure App Registrations and grant administrator consent.
- An Azure App Registration has been created with the required Microsoft Graph API permissions.
- If Permission-aware Search is enabled, the required Microsoft Entra ID permissions have been granted.
Create the Azure App Registration
Create an application in Microsoft Entra ID.- Sign in to the Azure portal.
- Navigate to Microsoft Entra ID > App registrations > New registration.
- Enter an application name (for example, Artemis SharePoint Connector).
- Select Accounts in this organizational directory only.
- Enter the Redirect URI as per your deployment.
- Click Register.
- Application (Client) ID - Use this as the Client ID.
- Directory (Tenant) ID - Use this as the Tenant ID.
Create a Client Secret
- Open the registered application.
- Navigate to Certificates & secrets.
- Under Client secrets, click New client secret.
- Enter a description.
- Select an expiry period.
- Click Add.
- Copy the generated secret value immediately. This is your Client Secret.
Configure Microsoft Graph Permissions
- Open the registered application.
- Navigate to API permissions.
- Click Add a permission.
- Select Microsoft Graph.
- Select Application permissions.
- Add the required permissions.
- Click Add permissions.
- Click Grant admin consent for your organization.
Required Permissions
The following permissions are required for all SharePoint connectors.
These permissions provide read-only access.
Additional Permissions for Permission-aware Search
Enable Permission-aware Search to ensure search results respect SharePoint access permissions. When enabled, the connector retrieves Microsoft Entra group memberships before returning search results. Grant the following additional Microsoft Graph permissions.Configure the SharePoint Connector
The SharePoint connector authenticates using OAuth 2.0 Client Credentials through Microsoft Entra ID.Step 1: Connect
The Connect page establishes the connection between the platform and Microsoft SharePoint. Connector Name: Enter a unique name to identify the connector. Authentication Method: Select one of the following authentication methods.Sign in with Microsoft
Authenticates using your Microsoft account through delegated permissions. The generated access token carries the signed-in user’s identity and permissions.Azure App Registration
Authenticates using an Azure App Registration. This is app-only communication method. Currently, only the Client Credentials authentication flow is supported. Provide the following details from your Azure App Registration and click Connect. The SharePoint connector requests read-only Microsoft Graph permissions. It never modifies SharePoint content, and all data is encrypted both in transit and at rest within your dedicated tenant partition.
Step 2: Configure Scope and Filters
After a successful connection, the connector discovers the available SharePoint environment and generates an ingestion proposal. Review or update the following settings before proceeding.
Click Save and Continue.
Step 3: Configure Field Mapping
Configure how SharePoint metadata maps to your knowledge base schema. You can:- Select fields to synchronize.
- Mark fields for embedding so they participate in vector search.
- Map fields to canonical fields for metadata filtering.