SphereShield for Sharepoint Inline

SphereShield can enforce Ethical Wall policies on Sharepoint in real time.

This is the complete installation guide for SphereShield for Sharepoint Inline.

 

Consent to Compliance app

Consent to Sharepoint app

https://login.microsoftonline.com/common/adminconsent?client_id=b335ed85-5009-41f1-9db5-fefc1688ea66&redirect_uri=https://appreg.agatcloud.com/final.html

Install SphereShield components

Install database, Admin Portal, CasbAdapter, Ad Sync, InternalServicesAPI

Install Sharepoint Inline site

  1. Create a new website in IIS. This website should be accessed worldwide.

  2. Bind the site to SharePointInline folder (will be shared from AGAT)

  3. Create a public URL to access the site

 

Create the SharePoint inline application in Sharepoint

Step 1

  • Browse https://<tenant name>-my.sharepoint.com/_layouts/15/appregnew.aspx

  • Fill the details. Keep Client Id and Client Secret (needed for later use) and click on Generate

  • App Domain - the public URL but without the https:// at the beginning and / at the end

  • Redirect URL - the public URL and add / at the end

  • This is how it should look like

  • click on Create

Step 2

https://learn.microsoft.com/en-us/answers/questions/714147/token-type-is-not-allowed-error-on-sharepoint-rest

Step 3

  • Browse https://<tenant name>-admin.sharepoint.com/_layouts/15/appinv.aspx

  • In “App Id” text box put the client Id from step 1. Click on Lookup button and you should see all of the details you’ve just created

  • In the permission text box put this text and click on Create

<AppPermissionRequests AllowAppOnlyPolicy="true"> <AppPermissionRequest Scope="http://sharepoint/content/tenant" Right="FullControl" /> <AppPermissionRequest Scope="http://sharepoint/content/sitecollection" Right="FullControl" /> <AppPermissionRequest Scope="http://sharepoint/content/sitecollection/web" Right="FullControl" /> </AppPermissionRequests>

Then click “Trust It” (if exists)

 

Admin Portal Configuration

Browse “Cloud Services Integration” and mark Office 365, Teams, SharePoint, OneDrive

Set “Enable SharePoint Inline” to Yes

image-20240626-120040.png

 

Fill the values of Compliance app, Sharepoint app, Sharepoint inline app and the Sharepoint site URL

CasbAdapter Configuration

InitializeMessagingBL - true EnableFetchingTeams - true EnableRefreshUsers - true EnableFetchingSharePointSites - true EnableWebhook - true