Arctera Insight Information Governance Administrator's Guide

To set the property DisableCustomAppAuthentication,

1. Install Module Pnp.Powershell using command in PowerShell Install-Module -Name PnP.PowerShell
2. Run the command Register-PnPManagementShellAccess and provide credentials of Minimum Privileges user Account.

   Note:

   This step is done to provide PnP PowerShell Authentication with Service Principal and send an interactive authorization request for this user and resource

3. Copy the following script in Notepad and save it as DisableCustomAppAuthentication.ps1 file.

   param (
   	[parameter(Mandatory=$true)]
       [string]$Organization)
   
   Import-Module PnP.PowerShell
   $url = 'https://'+$Organization+'-admin.sharepoint.com'
   Write-Output $url
   $userCredential = Get-Credential
   Connect-PnPOnline -Url $url -Credential $userCredential
   get-PnPTenant
   Set-PnPTenant -DisableCustomAppAuthentication $false

   This is required for normal functioning of fetching of Advanced Permission, classification of data and scanning local user for SharePoint Online and OneDrive.

4. Run the script using .\DisableCustomAppAuthentication.ps1
5. When prompted, provide organization name.
6. In the Windows Powershell Credential Request pop up, provide Minimum Privileges user credentials and click Ok
7. In the list of output, verify if the DisableCustomAppAuthentication property is set to False.

To configure created application to the lookup in Microsoft 365,

1. Copy the Client ID of the app created in the Azure portal App
2. Navigate to https://<organization-name>-admin.sharepoint.com/_layouts/15/appinv.aspx
3. Paste the Client ID copied from the Azure portal App in the App Id field
4. Click Lookup. Display name of the app will be auto populated in the Title field.
5. Add localhost.com in the App Domain field
6. Add https://localhost.com/default.aspx in the Redirect URL field
7. Add following XML in the App's Permission Request XML

   Since this application needs to be able to access all sites and uses search with app-only, it needs below permissions

   <AppPermissionRequests AllowAppOnlyPolicy="true">

   <AppPermissionRequest Scope="http://sharepoint/content/tenant"

   Right="FullControl"/>

   </AppPermissionRequests>
8. Click Create
9. Click Trust It

To provide permissions to specific site collections only,

1. Copy the Client ID of the app created in the Azure portal App
2. Navigate to https://<org-name>.sharepoint.com/sites/<site-collection-name>/_layouts/15/appinv.aspx
3. Paste the Client ID copied from the Azure portal App in the App Id field
4. Click Lookup. Display name of the app will be auto populated in the Title field.
5. Add localhost.com in the App Domain field
6. Add https://localhost.com/default.aspx in the Redirect URL field
7. Add following XML in the App's Permission Request XML

   Since this application needs to be able to access all sites and uses search with app-only, it needs below permissions

   <AppPermissionRequests AllowAppOnlyPolicy="true">

   <AppPermissionRequest Scope="http://sharepoint/content/sitecollection" Right="FullControl" /> 

   </AppPermissionRequests>
8. Click Create
9. Click Trust It