{"id":18012,"date":"2024-10-01T16:41:19","date_gmt":"2024-10-01T20:41:19","guid":{"rendered":"https:\/\/www.iri.com\/blog\/?p=18012"},"modified":"2024-11-06T13:46:14","modified_gmt":"2024-11-06T18:46:14","slug":"connecting-darkshield-to-sharepoint","status":"publish","type":"post","link":"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/","title":{"rendered":"Connecting DarkShield to SharePoint"},"content":{"rendered":"<p><b><i>Abstract<\/i><\/b><b>: <\/b><i><span style=\"font-weight: 400;\">This article describes how IRI DarkShield users can access files in SharePoint Online for searching and masking PII. It documents the setup steps you will take to use Microsoft Entra ID (formerly Azure Active Directory) for authorization, and configure DarkShield jobs in the IRI Workbench graphical IDE, built on Eclipse.<\/span><\/i><i><\/i><\/p>\n<p><span style=\"font-weight: 400;\">IRI DarkShield users interested in searching and masking PII or other sensitive data using the <\/span><a href=\"https:\/\/www.iri.com\/products\/workbench\/darkshield-gui\/file-masking\"><span style=\"font-weight: 400;\">IRI Workbench GUI for DarkShield<\/span><\/a><span style=\"font-weight: 400;\"> can now reach data sources and targets in SharePoint Online and OneDrive in the Microsoft Azure cloud environment. DarkShield also supports file sources and targets in <a href=\"https:\/\/www.iri.com\/blog\/data-protection\/masking-cloud-file-stores\/\">Azure Blob Storage folders, Amazon S3 buckets, and Google Cloud Platform (GCP) stores<\/a>.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">IRI Workbench accesses SharePoint Online via the Microsoft Graph API. MS Graph API is a RESTful web API from Microsoft that provides the ability to access Microsoft Cloud service resources, including SharePoint Online.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Specifically, to access SharePoint Online using MS Graph API, it is necessary to <\/span><a href=\"https:\/\/learn.microsoft.com\/en-us\/graph\/auth-register-app-v2\"><span style=\"font-weight: 400;\">register an application<\/span><\/a><span style=\"font-weight: 400;\"> from Azure Active Directory. This article will show you how to do that, and to use the credentials from the app to access files in SharePoint Online from IRI Workbench \u2026 so that DarkShield can scan and mask PII within them.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Prerequisites:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">An Azure account with an active subscription<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure account should have permission to manage applications from Azure AD<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A tenant has been <\/span><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/develop\/quickstart-create-new-tenant\"><span style=\"font-weight: 400;\">set up<\/span><\/a><\/li>\n<\/ul>\n<h5><b>Azure Active Directory App Registration Steps<\/b><\/h5>\n<h6><b>Step 1<\/b><\/h6>\n<p><span style=\"font-weight: 400;\">Login to your Microsoft account and go to Azure Active Directory from your home portal. Once inside Azure Active Directory we can start managing applications and permissions.\u2019<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-18018 aligncenter\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/azure-300x189.png\" alt=\"\" width=\"654\" height=\"412\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/azure-300x189.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/azure-1024x646.png 1024w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/azure-768x484.png 768w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/azure.png 1150w\" sizes=\"(max-width: 654px) 100vw, 654px\" \/><\/p>\n<h6><b><\/b><b>Step 2<\/b><\/h6>\n<p><span style=\"font-weight: 400;\">From the Azure AD page select <\/span><i><span style=\"font-weight: 400;\">App registrations<\/span><\/i><span style=\"font-weight: 400;\"> from the list of options on the left under the <\/span><b>Manage<\/b><span style=\"font-weight: 400;\"> panel.<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18019\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/azure-step-2-300x160.png\" alt=\"\" width=\"604\" height=\"322\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/azure-step-2-300x160.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/azure-step-2-768x409.png 768w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/azure-step-2.png 883w\" sizes=\"(max-width: 604px) 100vw, 604px\" \/><\/p>\n<h6><b>Step 3<\/b><\/h6>\n<p><span style=\"font-weight: 400;\">In this step we will begin the registration process for a new application by selecting <\/span><i><span style=\"font-weight: 400;\">New registration<\/span><\/i><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18020\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/azure-step-3-300x247.png\" alt=\"\" width=\"571\" height=\"470\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/azure-step-3-300x247.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/azure-step-3-768x632.png 768w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/azure-step-3.png 883w\" sizes=\"(max-width: 571px) 100vw, 571px\" \/><\/p>\n<h6><b>Step 4<\/b><\/h6>\n<p><span style=\"font-weight: 400;\">From the <\/span><i><span style=\"font-weight: 400;\">Register an application<\/span><\/i><span style=\"font-weight: 400;\"> page, provide a name for the application, select the supported account types from the list of choices, and click the <\/span><i><span style=\"font-weight: 400;\">Register<\/span><\/i><span style=\"font-weight: 400;\"> button.<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18021\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-4-300x172.png\" alt=\"\" width=\"617\" height=\"354\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-4-300x172.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-4-768x440.png 768w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-4.png 919w\" sizes=\"(max-width: 617px) 100vw, 617px\" \/><\/p>\n<h6><b>Step 5<\/b><\/h6>\n<p><span style=\"font-weight: 400;\">After the previous step is completed, a view of the created app and its current credentials are shown. Take note of the Application (client) ID and the Directory (tenant) ID values. In IRI Workbench these values will be needed later to connect to SharePoint Online. <\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Client credentials will also be needed but have not been created yet. Under <\/span><i><span style=\"font-weight: 400;\">Client credentials <\/span><\/i><span style=\"font-weight: 400;\">select <\/span><b>Add a certificate or secret.<\/b><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18023\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-5-300x182.png\" alt=\"\" width=\"662\" height=\"401\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-5-300x182.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-5-768x466.png 768w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-5.png 965w\" sizes=\"(max-width: 662px) 100vw, 662px\" \/><\/p>\n<h6><b>Step 6<\/b><\/h6>\n<p><span style=\"font-weight: 400;\">From the <\/span><i><span style=\"font-weight: 400;\">Certificates &amp; secrets<\/span><\/i><span style=\"font-weight: 400;\"> page select <\/span><b>New client secret<\/b><span style=\"font-weight: 400;\"> to receive the prompt to generate new credentials for the client.<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18024\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-6-300x221.png\" alt=\"\" width=\"436\" height=\"321\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-6-300x221.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-6.png 577w\" sizes=\"(max-width: 436px) 100vw, 436px\" \/><\/p>\n<h6><b>Step 7<\/b><\/h6>\n<p><span style=\"font-weight: 400;\">At the next prompt to <\/span><i><span style=\"font-weight: 400;\">Add a client secret<\/span><\/i><span style=\"font-weight: 400;\">,<\/span> <span style=\"font-weight: 400;\">provide a description for the secret and an expiration date from among the possible choices or create a custom expiration date. Note that when the client secret expires a new secret must be generated for the application.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Once finished, click <\/span><b>Add<\/b><span style=\"font-weight: 400;\"> to generate a client secret and return to the previous page.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Note: make sure to record the client secret value credential for use later when creating a DarkShield job in IRI Workbench.<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18025\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-7-300x142.png\" alt=\"\" width=\"836\" height=\"396\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-7-300x142.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-7-1024x486.png 1024w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-7-768x364.png 768w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-7.png 1117w\" sizes=\"(max-width: 836px) 100vw, 836px\" \/><\/p>\n<h6><b>Step 8<\/b><\/h6>\n<p><span style=\"font-weight: 400;\">In the left panel under <\/span><i><span style=\"font-weight: 400;\">Manage<\/span><\/i><span style=\"font-weight: 400;\">, select <\/span><i><span style=\"font-weight: 400;\">API permissions<\/span><\/i><span style=\"font-weight: 400;\">. From this page a list of permissions granted to this application will be displayed.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">To access and modify files stored within SharePoint Online the application must be given the necessary permissions. Select <\/span><i><span style=\"font-weight: 400;\">Add a permission<\/span><\/i><span style=\"font-weight: 400;\">, to be presented options.<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18026\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-8-300x238.png\" alt=\"\" width=\"575\" height=\"456\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-8-300x238.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-8-768x610.png 768w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-8.png 790w\" sizes=\"(max-width: 575px) 100vw, 575px\" \/><\/p>\n<h6><b>Step 9<\/b><\/h6>\n<p><span style=\"font-weight: 400;\">From the <\/span><i><span style=\"font-weight: 400;\">Request API permissions<\/span><\/i><span style=\"font-weight: 400;\"> page, select <\/span><b>Microsoft Graph<\/b><span style=\"font-weight: 400;\"> box from the list of commonly used Microsoft APIs. This will bring up a list of available permissions for Microsoft Graph.<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18027\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-9-300x265.png\" alt=\"\" width=\"614\" height=\"542\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-9-300x265.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-9-768x679.png 768w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-9.png 830w\" sizes=\"(max-width: 614px) 100vw, 614px\" \/><\/p>\n<h6><b>Step 10<\/b><\/h6>\n<p><span style=\"font-weight: 400;\">Provide all the necessary permissions for <\/span><i><span style=\"font-weight: 400;\">Sites<\/span><\/i><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18030\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-10-300x259.png\" alt=\"\" width=\"653\" height=\"564\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-10-300x259.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-10-768x663.png 768w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-10.png 843w\" sizes=\"(max-width: 653px) 100vw, 653px\" \/><\/p>\n<h6><b>Step 11<\/b><\/h6>\n<p><span style=\"font-weight: 400;\">Provide all the necessary permissions for <\/span><i><span style=\"font-weight: 400;\">Files<\/span><\/i><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18031\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-11-300x259.png\" alt=\"\" width=\"585\" height=\"505\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-11-300x259.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-11-768x663.png 768w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-11.png 839w\" sizes=\"(max-width: 585px) 100vw, 585px\" \/><\/p>\n<h6><b>Step 12<\/b><\/h6>\n<p><span style=\"font-weight: 400;\">Provide all the necessary permissions for <\/span><i><span style=\"font-weight: 400;\">List<\/span><\/i><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18032\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-12-300x200.png\" alt=\"\" width=\"602\" height=\"402\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-12-300x200.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-12-768x512.png 768w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-12.png 844w\" sizes=\"(max-width: 602px) 100vw, 602px\" \/><\/p>\n<p><span style=\"font-weight: 400;\">If you have added permissions for <\/span><i><span style=\"font-weight: 400;\">Sites<\/span><\/i><span style=\"font-weight: 400;\">, <\/span><i><span style=\"font-weight: 400;\">Files<\/span><\/i><span style=\"font-weight: 400;\">, and<\/span><i><span style=\"font-weight: 400;\"> Lists. <\/span><\/i><span style=\"font-weight: 400;\">You should have these permissions listed under Microsoft Graph permissions list along with a status of <\/span><i><span style=\"font-weight: 400;\">Not granted<\/span><\/i><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18033\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-12-part-2-300x199.png\" alt=\"\" width=\"636\" height=\"422\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-12-part-2-300x199.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-12-part-2-768x510.png 768w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-12-part-2.png 872w\" sizes=\"(max-width: 636px) 100vw, 636px\" \/><\/p>\n<h6><b>Step 13<\/b><\/h6>\n<p><span style=\"font-weight: 400;\">Next, these permissions must be granted consent. Select <\/span><i><span style=\"font-weight: 400;\">Grant admin consent.<\/span><\/i><span style=\"font-weight: 400;\"> At this point, you will be asked for confirmation. Click <\/span><i><span style=\"font-weight: 400;\">Yes<\/span><\/i><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18034\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-13-300x136.png\" alt=\"\" width=\"547\" height=\"248\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-13-300x136.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-13-768x349.png 768w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-13.png 851w\" sizes=\"(max-width: 547px) 100vw, 547px\" \/><\/p>\n<p><span style=\"font-weight: 400;\">A green circle with a check will indicate the permissions have been successfully granted.<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18035\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-13-pt-2-300x213.png\" alt=\"\" width=\"542\" height=\"385\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-13-pt-2-300x213.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-13-pt-2.png 734w\" sizes=\"(max-width: 542px) 100vw, 542px\" \/><\/p>\n<p><span style=\"font-weight: 400;\">Make sure you have recorded all the necessary SharePoint credentials for a DarkShield job in IRI Workbench. These include client ID, client secret value, tenant ID, SharePoint hostname, and SharePoint site name.<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18036\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-13-pt-3-254x300.png\" alt=\"\" width=\"291\" height=\"343\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-13-pt-3-254x300.png 254w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/step-13-pt-3.png 308w\" sizes=\"(max-width: 291px) 100vw, 291px\" \/><\/p>\n<h6><b>In IRI Workbench<\/b><\/h6>\n<p><span style=\"font-weight: 400;\">From the <\/span><i><span style=\"font-weight: 400;\">Setting up data connection(s)<\/span><\/i><span style=\"font-weight: 400;\"> wizard, select the SharePoint Online file storage type.\u00a0<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18037\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/Setting-up-data-connection-300x242.png\" alt=\"\" width=\"433\" height=\"349\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/Setting-up-data-connection-300x242.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/Setting-up-data-connection.png 545w\" sizes=\"(max-width: 433px) 100vw, 433px\" \/><\/p>\n<p><span style=\"font-weight: 400;\">Then click <\/span><b>New\u2026 <\/b><span style=\"font-weight: 400;\">to create a new connection registry for SharePoint which can be reused again in future DarkShield jobs.<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18038\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/create-a-new-connection-registry-256x300.png\" alt=\"\" width=\"393\" height=\"461\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/create-a-new-connection-registry-256x300.png 256w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/create-a-new-connection-registry.png 512w\" sizes=\"(max-width: 393px) 100vw, 393px\" \/><\/p>\n<p><span style=\"font-weight: 400;\">Fill in the required fields for the SharePoint Online connection, using the credentials previously recorded, and indicate the file formats to process.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Also optionally indicate a specific folder to read from\/write to or specific file to read from\/write to using a full path to the file. If neither is indicated DarkShield will search\/mask the entire SharePoint file system.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Read or Write to Database:<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-18039 alignleft\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/read-or-write-to-database-300x38.png\" alt=\"\" width=\"498\" height=\"63\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/read-or-write-to-database-300x38.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/read-or-write-to-database.png 486w\" sizes=\"(max-width: 498px) 100vw, 498px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-weight: 400;\">Read or Write to Folder:<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-18040 alignleft\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/Read-or-Write-to-Folder-300x38.png\" alt=\"\" width=\"497\" height=\"63\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/Read-or-Write-to-Folder-300x38.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/Read-or-Write-to-Folder.png 486w\" sizes=\"(max-width: 497px) 100vw, 497px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-weight: 400;\">Read or Write to Specific File:<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-18041 alignleft\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/Read-or-Write-to-specific-file-300x34.png\" alt=\"\" width=\"538\" height=\"61\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/Read-or-Write-to-specific-file-300x34.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/09\/Read-or-Write-to-specific-file.png 485w\" sizes=\"(max-width: 538px) 100vw, 538px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h6><b>In Closing<\/b><\/h6>\n<p><span style=\"font-weight: 400;\">If you have followed all these steps you should now have configured a Connection Registry that will allow you to access SharePoint Online using Azure Active Directory for authorization. <\/span><\/p>\n<p><span style=\"font-weight: 400;\">For more information on searching and masking PII in files through the DarkShield data masking tool GUI, see <a href=\"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-pii-in-files-with-the-darkshield-files-wizard\/\">this article<\/a>. For more information on DarkShield, or to get help using it, please email <a href=\"mailto:darkshield@iri.com\">darkshield@iri.com<\/a>.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Abstract: This article describes how IRI DarkShield users can access files in SharePoint Online for searching and masking PII. It documents the setup steps you will take to use Microsoft Entra ID (formerly Azure Active Directory) for authorization, and configure DarkShield jobs in the IRI Workbench graphical IDE, built on Eclipse. IRI DarkShield users interested<\/p>\n<div><a class=\"btn-filled btn\" href=\"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/\" title=\"Connecting DarkShield to SharePoint\">Read More<\/a><\/div>\n","protected":false},"author":152,"featured_media":18043,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[8],"tags":[1935,1940,1938,1941,14,1947,15,1388,850,1936,1937,1306,1942,1750,1939,1934],"class_list":["post-18012","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-protection","tag-azure-active-directory","tag-azure-app-registration","tag-cloud-integration","tag-compliance","tag-data-masking","tag-data-masking-toools","tag-data-security","tag-iri-darkshield","tag-iri-workbench","tag-microsoft-entra-id","tag-microsoft-graph-api","tag-pii-masking","tag-privacy","tag-sensitive-data-protection","tag-sharepoint-file-access","tag-sharepoint-online"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v23.4 (Yoast SEO v23.4) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Connecting DarkShield to SharePoint - IRI<\/title>\n<meta name=\"description\" content=\"Learn how to search and mask PII in SharePoint Online files in Azure using IRI DarkShield, after authenticating your connection with EntraID.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Connecting DarkShield to SharePoint\" \/>\n<meta property=\"og:description\" content=\"Learn how to search and mask PII in SharePoint Online files in Azure using IRI DarkShield, after authenticating your connection with EntraID.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/\" \/>\n<meta property=\"og:site_name\" content=\"IRI\" \/>\n<meta property=\"article:published_time\" content=\"2024-10-01T20:41:19+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-11-06T18:46:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/10\/connecting-darkshield-to-sharepoint.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1110\" \/>\n\t<meta property=\"og:image:height\" content=\"532\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Adam Lewis\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Adam Lewis\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/\"},\"author\":{\"name\":\"Adam Lewis\",\"@id\":\"https:\/\/www.iri.com\/blog\/#\/schema\/person\/37c0e5beab094bd61cc521902df2876e\"},\"headline\":\"Connecting DarkShield to SharePoint\",\"datePublished\":\"2024-10-01T20:41:19+00:00\",\"dateModified\":\"2024-11-06T18:46:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/\"},\"wordCount\":890,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.iri.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/10\/connecting-darkshield-to-sharepoint.png\",\"keywords\":[\"Azure Active Directory\",\"Azure app registration\",\"Cloud integration\",\"Compliance\",\"data masking\",\"data masking toools\",\"data security\",\"IRI DarkShield\",\"IRI Workbench\",\"Microsoft Entra ID\",\"Microsoft Graph API\",\"pii masking\",\"Privacy\",\"sensitive data protection\",\"SharePoint file access\",\"SharePoint Online\"],\"articleSection\":[\"Data Masking\/Protection\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/\",\"url\":\"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/\",\"name\":\"Connecting DarkShield to SharePoint - IRI\",\"isPartOf\":{\"@id\":\"https:\/\/www.iri.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/10\/connecting-darkshield-to-sharepoint.png\",\"datePublished\":\"2024-10-01T20:41:19+00:00\",\"dateModified\":\"2024-11-06T18:46:14+00:00\",\"description\":\"Learn how to search and mask PII in SharePoint Online files in Azure using IRI DarkShield, after authenticating your connection with EntraID.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/#primaryimage\",\"url\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/10\/connecting-darkshield-to-sharepoint.png\",\"contentUrl\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/10\/connecting-darkshield-to-sharepoint.png\",\"width\":1110,\"height\":532},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.iri.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Connecting DarkShield to SharePoint\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.iri.com\/blog\/#website\",\"url\":\"https:\/\/www.iri.com\/blog\/\",\"name\":\"IRI\",\"description\":\"Total Data Management Blog\",\"publisher\":{\"@id\":\"https:\/\/www.iri.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.iri.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.iri.com\/blog\/#organization\",\"name\":\"IRI\",\"url\":\"https:\/\/www.iri.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.iri.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2019\/02\/iri-logo-total-data-management-small-1.png\",\"contentUrl\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2019\/02\/iri-logo-total-data-management-small-1.png\",\"width\":750,\"height\":206,\"caption\":\"IRI\"},\"image\":{\"@id\":\"https:\/\/www.iri.com\/blog\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.iri.com\/blog\/#\/schema\/person\/37c0e5beab094bd61cc521902df2876e\",\"name\":\"Adam Lewis\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.iri.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/087667d0c75d33bb6fab6e734bd89333?s=96&d=blank&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/087667d0c75d33bb6fab6e734bd89333?s=96&d=blank&r=g\",\"caption\":\"Adam Lewis\"},\"url\":\"https:\/\/www.iri.com\/blog\/author\/adaml\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Connecting DarkShield to SharePoint - IRI","description":"Learn how to search and mask PII in SharePoint Online files in Azure using IRI DarkShield, after authenticating your connection with EntraID.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/","og_locale":"en_US","og_type":"article","og_title":"Connecting DarkShield to SharePoint","og_description":"Learn how to search and mask PII in SharePoint Online files in Azure using IRI DarkShield, after authenticating your connection with EntraID.","og_url":"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/","og_site_name":"IRI","article_published_time":"2024-10-01T20:41:19+00:00","article_modified_time":"2024-11-06T18:46:14+00:00","og_image":[{"width":1110,"height":532,"url":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/10\/connecting-darkshield-to-sharepoint.png","type":"image\/png"}],"author":"Adam Lewis","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Adam Lewis","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/#article","isPartOf":{"@id":"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/"},"author":{"name":"Adam Lewis","@id":"https:\/\/www.iri.com\/blog\/#\/schema\/person\/37c0e5beab094bd61cc521902df2876e"},"headline":"Connecting DarkShield to SharePoint","datePublished":"2024-10-01T20:41:19+00:00","dateModified":"2024-11-06T18:46:14+00:00","mainEntityOfPage":{"@id":"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/"},"wordCount":890,"commentCount":0,"publisher":{"@id":"https:\/\/www.iri.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/#primaryimage"},"thumbnailUrl":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/10\/connecting-darkshield-to-sharepoint.png","keywords":["Azure Active Directory","Azure app registration","Cloud integration","Compliance","data masking","data masking toools","data security","IRI DarkShield","IRI Workbench","Microsoft Entra ID","Microsoft Graph API","pii masking","Privacy","sensitive data protection","SharePoint file access","SharePoint Online"],"articleSection":["Data Masking\/Protection"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/","url":"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/","name":"Connecting DarkShield to SharePoint - IRI","isPartOf":{"@id":"https:\/\/www.iri.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/#primaryimage"},"image":{"@id":"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/#primaryimage"},"thumbnailUrl":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/10\/connecting-darkshield-to-sharepoint.png","datePublished":"2024-10-01T20:41:19+00:00","dateModified":"2024-11-06T18:46:14+00:00","description":"Learn how to search and mask PII in SharePoint Online files in Azure using IRI DarkShield, after authenticating your connection with EntraID.","breadcrumb":{"@id":"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/#primaryimage","url":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/10\/connecting-darkshield-to-sharepoint.png","contentUrl":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/10\/connecting-darkshield-to-sharepoint.png","width":1110,"height":532},{"@type":"BreadcrumbList","@id":"https:\/\/www.iri.com\/blog\/data-protection\/connecting-darkshield-to-sharepoint\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.iri.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Connecting DarkShield to SharePoint"}]},{"@type":"WebSite","@id":"https:\/\/www.iri.com\/blog\/#website","url":"https:\/\/www.iri.com\/blog\/","name":"IRI","description":"Total Data Management Blog","publisher":{"@id":"https:\/\/www.iri.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.iri.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.iri.com\/blog\/#organization","name":"IRI","url":"https:\/\/www.iri.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.iri.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2019\/02\/iri-logo-total-data-management-small-1.png","contentUrl":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2019\/02\/iri-logo-total-data-management-small-1.png","width":750,"height":206,"caption":"IRI"},"image":{"@id":"https:\/\/www.iri.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.iri.com\/blog\/#\/schema\/person\/37c0e5beab094bd61cc521902df2876e","name":"Adam Lewis","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.iri.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/087667d0c75d33bb6fab6e734bd89333?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/087667d0c75d33bb6fab6e734bd89333?s=96&d=blank&r=g","caption":"Adam Lewis"},"url":"https:\/\/www.iri.com\/blog\/author\/adaml\/"}]}},"jetpack_featured_media_url":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/10\/connecting-darkshield-to-sharepoint.png","_links":{"self":[{"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/posts\/18012"}],"collection":[{"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/users\/152"}],"replies":[{"embeddable":true,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/comments?post=18012"}],"version-history":[{"count":12,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/posts\/18012\/revisions"}],"predecessor-version":[{"id":18087,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/posts\/18012\/revisions\/18087"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/media\/18043"}],"wp:attachment":[{"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/media?parent=18012"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/categories?post=18012"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/tags?post=18012"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}