File Mover Blog

October 30, 2025

Sharepoint Authentication using Client ID and Certificate

..using Client ID and Certificate

Although we recommend our OAuth 2.0 authorization code flow , we received a request from a customer who wanted to use the Client ID and Client Secret to authenticate. We had this already available as Auth Type ‘Online Authentication using Client Credentials without User Dialog’. It appeared this option was outdated, so we updated that part of our code. Later we found out that for newly created SharePoint Sites, this ‘Client ID and Client Secret’ authentication no longer worked. It was replaced by ‘Client ID and Certificate’ authentication, so we added this option as well.

Limagito FileMover Setup

  • Setup
    • Set Site Url and Directory
    • Select ‘Online Authentication using Client Credentials without User Dialog’ as Auth Type

limagito filemover sharepoint setup

  • OAuth2
    • Set Token Endpoint URL to: https://login.microsoftonline.com/%realm/oauth2/v2.0/token
    • Set Scope to: https://yourSite.sharepoint.com/.default
    • Set Realm (= Directory Tenant ID)

limagito file mover sharepoint Client ID and Certificate

  • Security
    • Add your private Key File (.pfx)
    • Add password if needed

limagito filemover sharepoint Client ID and Certificate

Azure Setup

  • Register an application

limagito filemover azure register an application

limagito file mover azure app registrations

  • Overview
    • Application (client) ID is being used in the filemover OAuth2 setup
    • Directory (tenant) ID is being used in the filemover OAuth2 setup

limagito filemover azure app registrations

  • Authentication Setup

limagito filemover authentication setup

  • Certificates & secrets Setup
    • Upload the public part of your certificate here (.cer)

limagito file mover certificate setup

  • API permissions Setup
    • Add permission: SharePoint > Sites.ReadWrite.All

limagito filemover api permissions setup

  • Owners Setup

limagito filemover azure owners setup

  • Optional, you could use the ‘Integration assistant’ to do a check. Select ‘Daemon’ as Application type and set ‘Calls APIs’ to Yes

limagito filemover azure integration assistant

  • Access control check
    • Open your ‘SharePoin admin center’
      • Access control > Apps that don’t use modern authentication
        • Allow access

limagito filemover sharepoint admin center

 

If you need any help about this ‘Client ID and Certificate’ option, please let us know.

Best Regards,

Limagito Team

#sharepoint #managedfiletransfer #filetransfer #filemanagement

By Limagito-Team SharePoint , Share:
SEARCH