- OAuth2 authentication through VibeFlow Cloud or your own Microsoft Entra ID app credentials via BYOK.
BYOK (Bring Your Own Keys)
Use VibeFlow Cloud for the fastest setup, or use BYOK if you want each workspace to authorize through your own Microsoft Entra ID (Azure AD) app registration.Open the SharePoint Connector
Go to Settings > Connectors in your VibeFlow dashboard and select SharePoint.Choose Cloud (Recommended) to use VibeFlow-managed credentials, or choose Your Own Credentials to configure BYOK.
Register an Application in Microsoft Entra ID
Go to the Microsoft Entra admin center and navigate to Identity > Applications > App registrations. Click New registration.
- Name: Choose a name for your app
- Supported account types: Choose the option that matches your tenant setup. For multi-tenant access, use Accounts in any organizational directory and personal Microsoft accounts.
- Redirect URI: Web →
Configure API Permissions
In your app registration, go to API permissions > Add a permission > Microsoft Graph > Delegated permissions and add the following scopes:You can limit these scopes for least-privilege access, but SharePoint actions that depend on omitted permissions will not work. For example, file write operations require
Files.ReadWrite.All, and site/list write operations require Sites.ReadWrite.All.Click Grant admin consent if your tenant requires it.Create a Client Secret
Go to Certificates & secrets > Client secrets > New client secret. Copy the secret Value immediately — it will not be shown again.
Add Credentials to VibeFlow
In the VibeFlow SharePoint connector modal, select Your Own Credentials and paste:
- Client ID: the Application (client) ID from your Microsoft Entra app registration
- Client Secret: the client secret Value from Certificates & secrets
BYOK is ideal for businesses that require data isolation, custom branding, or stricter compliance requirements.

