Summary
This article is for IT Personnel.
What follows are instructions for setting up a CityLaw/CountyLaw NG (CLNG) File Share in a SharePoint Site that exists within your Microsoft 365 organization.
Here is an outline of the process:
- Create an Azure App Registration for CLNG.
- Grant necessary Permissions to the Azure App Registration.
- Create the SharePoint Site to serve as the File Share.
- Grant the CLNG App Registration access to the SharePoint Site.
- Send Cycom the App Registration and SharePoint Site connection info.
What you will need
- The URL of your organization's deployment of CLNG (provided by Cycom).
- Access to your organization's Microsoft 365 Azure Portal and permissions to create Entra ID App Registrations and SharePoint Sites. (If you are an Administrator of your Microsoft 365 Account then you have sufficient permissions.)
Create the Azure App Registration
Navigate to the Azure Portal (https://portal.azure.com). Sign in with your Microsoft 365 credentials and select Microsoft Entra ID (formerly Azure Active Directory).
- Name the new App Registration (e.g. "CityLaw NG (Production)").
- Select the Single Tenant radio button under "Supported account types".
- Under "Redirect URI", enter the URL of the CLNG deployment as a Web URI. We will add more redirect URIs later.
- Select "Register".
⭐ Copy the Directory (Tenant) ID
Add additional redirect URIs
In the left-hand navigation, select "Authentication" (under the "Manage" heading).
Using the CLNG URL provided by Cycom, add this Web Redirect URI:
https://{Your_CLNG_URL}/home/modules/assignments/attachments
❗ Remember to replace "{Your_CLNG_URL}" with the URL provided by Cycom.
Enable ID Tokens
On the same page ("Authentication"), scroll down to the "Implicit grant and hybrid flows" heading and select the ID Tokens checkbox.
❗ Press "Save" to save these changes.
Create a Client Secret
Select "Certificates & secrets" from the left-hand navigation (under the "Manage" heading), then select the "Client secrets" tab.
Grant Permissions to the App Registration
In the left-hand navigation select "API Permissions" (under the "Manage" header). You should see the User.Read delegated permission granted by default.
Sites. and select the Sites.Selected and Sites.ReadWrite.All checkboxes. Then enter Mail.ReadWrite and select the Mail.ReadWrite checkbox. Finally, press "Add permissions" to add the selected to permissions to the App Registration. Sites.Selected permission authorizes CLNG to read from and write to the SharePoint Site's Document Library, and the Sites.ReadWrite.All permission authorizes CLNG to create "open" links, so authenticated users can open files within CLNG on those Matters to which they have access.Grant Admin Consent
Note that Admin consent has not yet been granted for your organization. To grant consent, press the button above the permissions table labeled "Grant admin consent...".
You will see a pop-up confirmation. Press "Yes" to grant consent.
The status of the permissions should then change to "Granted":
Your CLNG Azure App Registration is now configured!
⭐ Provide Cycom with the Application (Client) ID and Client Secret you copied earlier. Next, we will create the SharePoint site that will serve as your CLNG File Share.
Create the SharePoint Site
Sign in to your Microsoft 365 tenant and navigate to your SharePoint site list.
At the top-left, select "Create site".
Select the "Team site" type.
Select the "Standard team" template. (This site will not be accessed from the browser, so the template is not important.)
Press the "Use template" button to continue.
Name the SharePoint site and provide a description if desired.
Verify that the "Privacy settings" dropdown is set to "Private" and press "Create site".
❗ Important
Grant the CLNG App Registration access to the SharePoint Site
Grant Consent to Modify Permissions
Sites.FullControl.All permission in the list. Obtain the SharePoint Site ID and Drive ID
https://graph.microsoft.com/v1.0/search/query
{
"requests": [
{
"entityTypes": [
"drive"
],
"query": {
"queryString": "production"
}
}
]
}
Drive ID
"id" property. It should be immediately below the "@odata.type" property that has a value of "#microsoft.graph.drive"."id". This is the Drive ID of the SharePoint Site.SharePoint Site ID
"siteId" property. This is the ID of the SharePoint Site. It should look something like this:// Example SharePoint Site ID:
'pawnee.sharepoint.com,d2045e1a-c8d0-42b5-9e39-f41e6f7d6f9d,1d38138e-bdbe-4956-9d28-c760b84132a9'
"siteId" property, copy the value. This is the ID of the SharePoint Site. Grant Write Permission to the Azure App Registration
id, you can grant the CLNG Azure App Registration write permission to that SharePoint site.{id}.📌 Replace {id} with your actual SharePoint Site ID
https://graph.microsoft.com/v1.0/sites/{id}/permissions
"id" property and match the value of "displayName" to the name of the Azure App Registration.{
"roles": [
"write"
],
"grantedToIdentities": [
{
"application": {
"id": {Application (Client) ID of the Azure App Registration},
"displayName": {Name of the Azure App Registration}
}
}
]
}
write permission. You should see a Created 201 confirmation below the Request Body and receive a response like the one below. Optional: Unconsent to Modify Permissions
Sites.FullControl.All permission in Microsoft Graph Explorer.- Select your Profile Picture at the top-right of Graph Explorer to open your Profile Card, then click the "Consent to permissions" link to open the Permissions panel.
- In the Permissions panel, enter "Sites" in the search box to filter the list of permissions, and press "Unconsent" to the right of the
Sites.FullControl.Allpermission.
You should see the label on the button change from "Unconsent" to "Consent".
📌 If Unconsent is Disabled
Directory.Read.AllDelegatedPermissionGrant.ReadWrite.All
Sites.FullControll.All permission again. Checkup
- Created and configured the CLNG App Registration in Azure.
- Created and configured the CLNG SharePoint File Share.
- Granted the CLNG App Registration
writeaccess to the SharePoint File Share.
- The Directory (Tenant) ID of your Organization's Azure Entra ID Tenant.
- The Application (Client) ID of the Azure App Registration.
- The Client Secret of the Azure App Registration.
- The Drive ID of the SharePoint File Share.
Comments
0 comments
Article is closed for comments.