SharePoint Integration in Entra: The Technical Setup

Have your IT provider handle the technical setup Activating an integration with Microsoft® SharePoint requires technical and functional knowledge of SharePoint and Entra. Therefore, let your IT provider handle this setup. Should there still be questions, MKG can certainly provide support.

Requirements

Licenses

To use a SharePoint integration with MKG, an Entra environment with the appropriate user-level licenses is required.

License	Entra App Registration	SP Online Storage	Works with MKG
Microsoft Entra ID Free
M365 Business Basic		(1 TB org + 10 GB/user)
M365 Business Standard
M365 Business Premium
Office 365 E1
Office 365 E3
Office 365 E5
SharePoint Online Plan 1 (standalone)
SharePoint Online Plan 2 (standalone)

Access Rights to Entra Environment

Specific rights are required to create an app registration in Entra. An administrator must have at least the 'Application Developer' role to perform an app registration. This role provides sufficient rights to create an app and add API permissions. However, to grant admin consent at the tenant level - which is necessary for certain permissions, such as Microsoft® Graph - the 'Global Administrator' role is required. Therefore, it is recommended that a Global Administrator performs the app registration or is at least available to grant the necessary consent.

SharePoint Site for Document Storage

To use the SharePoint integration within MKG, a SharePoint site must be available for document storage. This site should be pre-configured with a stable structure and a clear rights configuration. The site must be accessible to users who wish to store or consult documents via MKG.

Security Groups and User Membership

Within Entra, security groups must be set up that will eventually be linked to document categories in MKG. Only groups that are set up as security groups in Microsoft Entra and have Security enabled will be recognized and displayed by MKG. 

The document category in MKG determines which documents a user can see in the MKG interface. Actual access to the document is determined by membership in the linked security group.

It is possible for a user to see a document as a record in MKG but not be able to open it due to missing membership. Conversely, it can also occur that a user has access to a document via SharePoint, but it is not visible in MKG.

App Registration in Entra

Follow the steps below to create an app registration that allows MKG users to store or consult documents via the UI (user interface) in combination with SharePoint.

Step 1: Sign In

Go to the Microsoft Entra Portal and sign in with a user (a user with the 'Global Administrator' role is recommended).

Step 2: New Registration

Choose 'App registrations' in the menu and then the action New registration.

Step 3: Enter the App Registration Name

For the app registration, enter the name "MKG ERP Sharepoint" at Name. Select the (default) option 'Accounts in this organizational directory only (Single tenant)' under 'Supported account types' and choose the action Register.

Step 4: Create a Client Secret

In the created app registration, go to 'Certificates & secrets' and choose New client secret.

Then fill in Description with "MKG ERP SharePoint", select Expires option 'Recommended: 180 days (6 months)' and click Add.

Step 5: Execute the API Permissions

In the created app registration, go to 'API permissions' and choose Add a permission and add the following Microsoft Graph permissions (type 'Delegated' or 'Application').

Permission	Description	Type	Admin consent required
Group.Read.All	Read Microsoft 365 groups	Application
Sites.FullControl.All	Full access to all SharePoint sites	Application
Sites.Manage.All	Manage SharePoint sites and document libraries	Application
Sites.Selected	Restricted access to specific SharePoint sites	Application
User.Read	Read profile of signed-in user	Delegated

• For the permissions 'Group.Read.All', 'Sites.FullControl.All', 'Sites.Manage.All', and 'Sites.selected', additional approval is required. Execute the action Grant admin consent for this.

Step 6: Note the Client ID and Tenant ID

In the created app registration, go to the 'Overview' tab. Record the values of both the 'Application (client) ID' and the 'Directory (tenant) ID'. Note these details, along with the information from step 4, for the subsequent steps.

Retrieve Site ID in the Admin Center

Step 1: Sign In

Go to the Microsoft 365 Admin Center and sign in with a user (a user with the 'Global Administrator' role is recommended).

Step 2: Select the Admin Center

Choose 'Admin Centers' in the menu and then 'SharePoint'. You will automatically enter the correct Admin Center for your tenant, for example, https://contoso-admin.sharepoint.com.

Step 3: Note the Site ID

Select the site to be used for integration with MKG and retrieve the 'siteId' from the URL in the address bar. Note this value for the subsequent step. For example:

URL: https://contoso-admin.sharepoint.com/_layouts/15/online/AdminHome.aspx#/siteManagement/:/SiteDetails/b8df588c-ff95-44b3-bf3b-8d498c712345a

SiteId: b8df588c-ff95-44b3-bf3b-8d498c712345a

Storage Structure in SharePoint

The SharePoint integration stores documents in document libraries that are automatically managed by the integration.

With each document upload, unique permissions are granted at the file level so that authorizations from MKG are also applied within SharePoint. 

To ensure the scalability and performance of SharePoint, documents are distributed across multiple document libraries. The integration automatically creates a new document library monthly for this purpose, for example:

MKGDocs 2026-08
MKGDocs 2026-09
MKGDocs 2026-10

Within each document library, the existing folder structure remains unchanged: YYYY/MM/DD/HHMMSS/.

This way, existing links and the document structure are preserved, while the number of documents and unique permissions per document library remain within the limits recommended by SharePoint.