1     Overview

DynamicPoint applications will require access to SharePoint to perform such actions as saving data and querying user information. The process involves several steps of creating an app registration in Azure, configuring it with a cert and configuring the tenant in DynamicPoint Tenant Admin application to use this app registration and cert.

2     Azure Active Directory

Create app-registration in Azure

App Registration

1. Go to portal.azure.com and click on Microsoft Entra ID:
   
2. From the left menu navigate to App Registrations:
   
3. Click on New Registration:
   
4. On the following screen specify a name for the app registration and leave the rest of the settings to their defaults:
   
5. At the bottom of the screen click the Register button.

Configure App Registration

Now we have the app registration created, we need to configure the permissions which it will allow to DynamicPoint applications.

1. Click on API permissions and the following screen will be displayed:
   
2. By default, Microsoft Graph permissions will be added, leave them as they are. Next, click the Add a permission button, search for SharePoint in the list of applications:
   
3. Select Application permissions:
   
4. Select the following permissions:
   – Site.ManageAll
   – User.ReadAll.
   
5. Click add permissions
6. Next, click add permissions again and chose SharePoint, but this time select Delegated permissions
   
7. Select the following permissions:
   – AllSites -> AllSites.Write
   
   – User -> User.Read.All
   
   
8. Once you are finished click Add permissions button at the bottom.
9. The resulting permissions should look as follows:
   
10. If you are deploying either EasyAP365 or EasyEXP365, additional security is needed.  Please configure the following permissions for these applications.
    Power Automate
    Additional SharePoint Application Permission
    
11. Be sure to Grant Admin consent by clicking on the button
    

Redirect

1. Click on Overview
2. Click on Redirect URIs:
   
3. Select Add a Platform
   
4. Select Web
   
5. Add the URL of the application being installed:
   Portal: https://portal.dynamicpoint.com
   EasyAP365: https://easyap365.dynamicpoint.com
   EasyEXP365: https://easyexp365.dynamicpoint.com
6. Ensure the ID tokens option is enabled
   

Certificate Configuration

Now we need to configure the cert.

1. Either provide your own certificate or download the following cert.
2. Click on Certificates and Secrets from the left menu and select the Upload Certificate button and use the dialog on the right to upload the certificate.
   
3. Here you need to upload the .cer file of your certificate. Once uploaded, the certificate list should look similar to this:
   
4. Submit your application and client ID to DynamicPoint via the following form for secure transmission.