SharePoint Integration
Connecting SharePoint to your Vault
Automatically sync files from SharePoint folders into AdviserGPT — so AdviserGPT always has your latest documents without manual uploads.
✓ How SharePoint sync works end-to-end
✓ What your IT team needs to do in Azure
✓ How to connect folders inside AdviserGPT
✓ What to do when something breaks
How SharePoint sync works
Two teams are involved — IT sets up the Azure connection once, then you select which folders to watch.
Your IT team does this
Azure app registration
Creates an Azure app in Microsoft Entra ID, grants read-only SharePoint access, and hands you three credentials. One-time setup per tenant.
You do this in AdviserGPT
Connect & watch folders
Paste three credentials from IT into Firm Settings → SharePoint, then select which folders to watch. Files sync automatically after that.
What IT needs & produces
- Needs Azure Portal access and a Global Administrator account — required for the consent step within B
- After setup, IT hands off three values: tenant ID, client ID, and client secret — all three detailed in Step 2
- Step 2 below covers all three Azure steps in detail with screenshots
You need the Admin role to access the SharePoint tab in Firm Settings. If the tab is missing when you open /account?tab=sharepoint, ask your account admin to upgrade your role before continuing.
🔄 How sync works after setup: Microsoft Graph sends a change notification to AdviserGPT whenever a file is added or updated in a watched folder. The app downloads the file and stores it in your Vault under the sharepoint folder label — no manual uploads needed.
IT team: Azure app setup
Forward this section to your IT team. They complete these four steps in Microsoft Azure — you can't do anything in AdviserGPT until these are done.
First step in Azure
Create an app registration
In Azure Portal → Microsoft Entra ID → App registrations → New registration. This creates the identity the connector will use.
Second step in Azure
Add Graph permissions & grant consent
Grant the app read access to SharePoint files and sites (Files.Read.All and Sites.Read.All), then have a Global Administrator approve the permissions.
Third step in Azure
Create a client secret
Generate a secret with a 12–24 month expiry. The value is shown only once — copy it immediately and store it securely until you're ready to paste it into AdviserGPT.
Create app registration — step by step
Fill in a display name and select "Single tenant" — leave Redirect URI blank- Go to Azure Portal → Microsoft Entra ID → App registrations → New registration
- Name it something recognizable, e.g. "Sharepoint Connector for AdviserGPT" — internal only
- Supported account types: "Accounts in this organizational directory only" (Single tenant)
After registering — copy both IDs from this Overview page and hand them to your AdviserGPT adminWhat IT needs to hand off to you — 3 values
Directory (tenant) ID
Found on the app registration Overview page in Azure
Application (client) ID
Found on the app registration Overview page in Azure
Client secret value
Copied immediately after creation in step C — visible only once in Azure
Connect in AdviserGPT
With the three credentials from IT in hand, these two steps complete the integration.
First
Open SharePoint settings & save credentials
Navigate to Firm Settings → SharePoint (Admin only), paste the three values from IT, and click Save. A "Connected" badge confirms the app can reach your Microsoft tenant.
Second
Add watched folders
Enter your SharePoint site URL, browse the library, select folders, and click Add Selected. Each row shows Active when the subscription is live.
Opening SharePoint settings & saving credentials
- Sign in with a user that has the Admin role — the SharePoint tab is hidden for all other roles
- Open Firm Settings from the profile menu, then click the SharePoint tab. Or navigate directly to /account?tab=sharepoint
- If you see a 403 error or the tab is missing, your account doesn't have Admin yet — ask your account admin to assign the role, or have them complete the remaining setup (A and B) on your behalf
Paste the three values from IT into these fields and click Save — the green Connected badge confirms the connection works- Azure tenant ID = Directory (tenant) ID from the app registration Overview page
- Client ID = Application (client) ID from the app registration Overview page
- Client secret = the value copied immediately after creation in step C
- When the secret expires, return here and paste the new value — tenant ID and client ID stay the same
🔄 Subscriptions renew automatically. SharePoint sync subscriptions expire every few days by design — AdviserGPT renews them in the background with no action needed. If a folder ever shows "Expiring soon" or "Expired" after a platform outage, use Sync now in Firm Settings → SharePoint to recover immediately.
Something not working? Expand the symptom that matches.
Likely cause: your user doesn't have the Admin role in AdviserGPT.
Ask your AdviserGPT contact to assign the Admin role to you in Firm Settings → Team, or have them complete steps A and B on your behalf. The API enforces this role check on every SharePoint settings endpoint.
Likely cause: wrong tenant ID, client ID, or secret — or admin consent hasn't been granted yet.
Loop back to Step 2 with your IT team. Confirm all three values are copied correctly from Azure (no trailing spaces). Confirm both permissions show a green “Granted” checkmark in the API permissions panel — “Not granted” is a common miss. If the client secret was regenerated since IT first created it, paste the latest value.
Likely cause: the Azure app doesn't have permission to read that folder, or the SharePoint site URL is wrong.
Confirm admin consent is granted for both Files.Read.All and Sites.Read.All. Double-check the SharePoint site URL — use the root site URL (e.g. https://contoso.sharepoint.com/sites/Research), not a deep folder link. Confirm the target folder exists in SharePoint and the Azure app has access to the site.
Likely cause: subscription expired (e.g. after an outage), or the file exceeds the 50 MB limit.
Open Firm Settings → SharePoint and check the status column. If any row shows “Expired,” click Sync now to reactivate it. For files over 50 MB, split or compress them before uploading to SharePoint — there is no workaround for the size limit.
Likely cause: the client secret created in step C has reached its expiry date in Azure.
Your IT team creates a new client secret in Azure (repeat step C), then you return to Firm Settings → SharePoint, paste the new secret value into the credentials form, and save. The tenant ID and client ID do not change — only the secret needs updating.
How SharePoint sync works
Two teams are involved — IT sets up the Azure connection once, then you select which folders to watch.
Your IT team does this
Azure app registration
Creates an Azure app in Microsoft Entra ID, grants read-only SharePoint access, and hands you three credentials. One-time setup per tenant.
You do this in AdviserGPT
Connect & watch folders
Paste three credentials from IT into Firm Settings → SharePoint, then select which folders to watch. Files sync automatically after that.
What IT needs & produces
- Needs Azure Portal access and a Global Administrator account — required for the consent step within B
- After setup, IT hands off three values: tenant ID, client ID, and client secret — all three detailed in Step 2
- Step 2 below covers all three Azure steps in detail with screenshots
You need the Admin role to access the SharePoint tab in Firm Settings. If the tab is missing when you open /account?tab=sharepoint, ask your account admin to upgrade your role before continuing.
🔄 How sync works after setup: Microsoft Graph sends a change notification to AdviserGPT whenever a file is added or updated in a watched folder. The app downloads the file and stores it in your Vault under the sharepoint folder label — no manual uploads needed.
IT team: Azure app setup
Forward this section to your IT team. They complete these four steps in Microsoft Azure — you can't do anything in AdviserGPT until these are done.
First step in Azure
Create an app registration
In Azure Portal → Microsoft Entra ID → App registrations → New registration. This creates the identity the connector will use.
Second step in Azure
Add Graph permissions & grant consent
Grant the app read access to SharePoint files and sites (Files.Read.All and Sites.Read.All), then have a Global Administrator approve the permissions.
Third step in Azure
Create a client secret
Generate a secret with a 12–24 month expiry. The value is shown only once — copy it immediately and store it securely until you're ready to paste it into AdviserGPT.
Create app registration — step by step
Fill in a display name and select "Single tenant" — leave Redirect URI blank- Go to Azure Portal → Microsoft Entra ID → App registrations → New registration
- Name it something recognizable, e.g. "Sharepoint Connector for AdviserGPT" — internal only
- Supported account types: "Accounts in this organizational directory only" (Single tenant)
After registering — copy both IDs from this Overview page and hand them to your AdviserGPT adminWhat IT needs to hand off to you — 3 values
Directory (tenant) ID
Found on the app registration Overview page in Azure
Application (client) ID
Found on the app registration Overview page in Azure
Client secret value
Copied immediately after creation in step C — visible only once in Azure
Connect in AdviserGPT
With the three credentials from IT in hand, these two steps complete the integration.
First
Open SharePoint settings & save credentials
Navigate to Firm Settings → SharePoint (Admin only), paste the three values from IT, and click Save. A "Connected" badge confirms the app can reach your Microsoft tenant.
Second
Add watched folders
Enter your SharePoint site URL, browse the library, select folders, and click Add Selected. Each row shows Active when the subscription is live.
Opening SharePoint settings & saving credentials
- Sign in with a user that has the Admin role — the SharePoint tab is hidden for all other roles
- Open Firm Settings from the profile menu, then click the SharePoint tab. Or navigate directly to /account?tab=sharepoint
- If you see a 403 error or the tab is missing, your account doesn't have Admin yet — ask your account admin to assign the role, or have them complete the remaining setup (A and B) on your behalf
Paste the three values from IT into these fields and click Save — the green Connected badge confirms the connection works- Azure tenant ID = Directory (tenant) ID from the app registration Overview page
- Client ID = Application (client) ID from the app registration Overview page
- Client secret = the value copied immediately after creation in step C
- When the secret expires, return here and paste the new value — tenant ID and client ID stay the same
🔄 Subscriptions renew automatically. SharePoint sync subscriptions expire every few days by design — AdviserGPT renews them in the background with no action needed. If a folder ever shows "Expiring soon" or "Expired" after a platform outage, use Sync now in Firm Settings → SharePoint to recover immediately.
Something not working? Expand the symptom that matches.
Likely cause: your user doesn't have the Admin role in AdviserGPT.
Ask your AdviserGPT contact to assign the Admin role to you in Firm Settings → Team, or have them complete steps A and B on your behalf. The API enforces this role check on every SharePoint settings endpoint.
Likely cause: wrong tenant ID, client ID, or secret — or admin consent hasn't been granted yet.
Loop back to Step 2 with your IT team. Confirm all three values are copied correctly from Azure (no trailing spaces). Confirm both permissions show a green “Granted” checkmark in the API permissions panel — “Not granted” is a common miss. If the client secret was regenerated since IT first created it, paste the latest value.
Likely cause: the Azure app doesn't have permission to read that folder, or the SharePoint site URL is wrong.
Confirm admin consent is granted for both Files.Read.All and Sites.Read.All. Double-check the SharePoint site URL — use the root site URL (e.g. https://contoso.sharepoint.com/sites/Research), not a deep folder link. Confirm the target folder exists in SharePoint and the Azure app has access to the site.
Likely cause: subscription expired (e.g. after an outage), or the file exceeds the 50 MB limit.
Open Firm Settings → SharePoint and check the status column. If any row shows “Expired,” click Sync now to reactivate it. For files over 50 MB, split or compress them before uploading to SharePoint — there is no workaround for the size limit.
Likely cause: the client secret created in step C has reached its expiry date in Azure.
Your IT team creates a new client secret in Azure (repeat step C), then you return to Firm Settings → SharePoint, paste the new secret value into the credentials form, and save. The tenant ID and client ID do not change — only the secret needs updating.
