Differences

This shows you the differences between two versions of the page.

--- 711:cms_sharepoint_online [2025/05/28 11:28] – Policnik, Florian
+++ 711:cms_sharepoint_online [2025/12/15 15:25] (current) – Policnik, Florian
@@ Line 38: / Line 38: @@
   * Links: [[https://portal.azure.com|Microsoft Azure Portal]]
-> client.secret ** * **
+> client.secret ** * ** //(required if no keystore file is provided)//
   * Description: The client secret, which can be generated after registering the stages application at the Microsoft azure portal website.
   * Links: [[https://portal.azure.com|Microsoft Azure Portal]]
+> client.certificate.keystore.file //(since Stages 7.11.10.0, required if no client secret is provided)//
+  * Description: Path to the keystore file with private key and certificate to authenticate with Azure. Path can be absolute or relative to Stages installation directory.
+> client.certificate.keystore.password //(since Stages 7.11.10.0, required if no client secret is provided)//
+  * Description: Password for the specified keystore file.
+> client.certificate.key.alias //(since Stages 7.11.10.0, required if no client secret is provided)//
+  * Description: Alias of the private key / certificate entry in keystore file.
+> client.certificate.key.password //(since Stages 7.11.10.0, required if no client secret is provided)//
+  * Description: Password of the private key / certificate entry in keystore file.
 > tenant.id ** * **
@@ Line 258: / Line 274: @@
 ==== Certificates & secrets ====
-It is required to generate a client secret for Stages. It's recommended to choose expire never or a long duration. If the secret expires it must be changed in Stages and all users have to re-authenticate.
+It is required to generate a client secret or certificate for Stages.
+=== Client Secret ===
+It's recommended to choose expire never or a long duration. If the secret expires it must be changed in Stages.
 [[https://doc.stagesasaservice.com/lib/exe/detail.php?id=74:cms_sharepoint_online&media=cms:azure_certificates_secrets.png|{{:cms:azure_certificates_secrets.png}}]]
+Client secret can be specified like this:
+<code xml>
+<cms-property name="client.secret" value="xxxxxx" />
+</code>
+=== Certificates (Since 7.11.10.0) ===
+It is possible to use certificates instead of client secret. A [[https://learn.microsoft.com/en-us/entra/identity-platform/howto-create-self-signed-certificate|certificate has to be generated]] and added to Azure configuration. A keystore file with private key and certificate has to be configured in Stages:
+<code xml>
+<cms-property name="client.certificate.keystore.file" value="conf/sharepointonline.pfx" />
+<cms-property name="client.certificate.keystore.password" value="keystorepassword" />
+<cms-property name="client.certificate.key.alias" value="myalias" />
+<cms-property name="client.certificate.key.password" value="keypassword" />
+</code>
 ===== Repository Configuration =====