Register the app in Entra ID

The first stage of SharePoint setup, in the Azure Portal. It requires tenant admin rights (Global Administrator or Application Administrator) on the Microsoft 365 tenant that owns your SharePoint sites. If you are not a tenant admin, hand this section to whoever is, because most steps need their account.

Vocabulary, so the screens make sense

• Tenant - your organisation’s Microsoft 365 account. The tenant owns Entra ID (formerly Azure AD), SharePoint Online, Exchange, and so on. Its identity is a GUID, the “Tenant ID”.
• Entra ID - Microsoft’s identity service. Formerly “Azure AD”.
• App registration - the Entra ID record that represents a third-party application, Sliick Files here. It holds the Client ID, secrets, and permission grants.
• Service Principal / Application permission - the app calls Graph as itself, no user context. Best for back-end integrations.
• Delegated permission - the app calls Graph on behalf of a signed-in user. Best when you want SharePoint audit trails to show the human, not the app.
• Admin consent - the moment a tenant admin clicks “Grant admin consent” and the permission becomes usable. Without consent, every Graph call returns 403.

1. Open Microsoft Entra ID

1. Sign in to https://portal.azure.com as a tenant admin.
2. In the search bar at the top, type Microsoft Entra ID and open the service.
3. On the Overview tab, copy the Tenant ID, a GUID under “Basic information”. Write it down; you will need it for Salesforce.

2. Create the app registration

1. In Entra ID, click App registrations in the left sidebar, then + New registration at the top.
2. Name - Sliick Files (SharePoint Graph), or any label your tenant uses. Users see this name on the consent screen.
3. Supported account types - Accounts in this organizational directory only (Single tenant).
4. Redirect URI - leave blank for now. You add it later if you use Delegated mode; Service Principal mode does not need one.
5. Click Register.
6. On the new app’s Overview page, copy:
   • Application (client) ID - write it down as Client ID.
   • Directory (tenant) ID - confirm it matches the Tenant ID from step 1.

3. Create a client secret

The “client secret” is the password Entra accepts when Salesforce proves it is the Sliick app.

1. In your app registration, click Certificates & secrets in the left sidebar.
2. On the Client secrets tab, click + New client secret.
3. Description - Sliick Files Salesforce.
4. Expires - pick a duration. Microsoft caps secret lifetime at 24 months. Pick the longest available and set a calendar reminder to rotate before expiry. When the secret expires, Sliick stops working until a new one is issued and re-entered in Salesforce.
5. Click Add.
6. The new secret appears in the table. Copy the Value column immediately.

The secret value is shown exactly once. If you navigate away before copying it, you must delete this secret and create a new one. Paste it into a password manager, or keep the tab open until you have finished the Salesforce setup.

Next: Grant Microsoft Graph permissions.