I'm trying to convert Provider Hosted SharePoint Online application to Azure AD multi-tenant app, but I'm having issues registering existing application on SharePoint.

I created new app on Azure AD where I get application ID and Secret. I try to use that ID and Secret in my SharePoint deployment process but I am unable to register SharePoint application with that ID.

Issue is similar with one shown in question: Can you create a multitenant provider hosted app without using the office store? , however they reuse existing SharePoint ID & Secret but I cannot do that as Azure ID can only create new ID&Secret (meaning i cannot reuse existing one).

I need Azure AD app for OAuth flow because SharePoint app is used as office/outlook add-in, and only way to get user to log (and retrieve its info) in by using graph api.

Basically I'm grasping for straws here, any help is greatly appreciated.

1 Answer 1


You have to either choose to use the appid/secret generated in SharePoint (appregnew.aspx) OR have the app being created in Azure AD. You can't combine this into the same app. SharePoint apps are still using the old Azure ACS (Access Control Services).

If you're using the Graph API, just use an Azure AD app, you can pass that auth token to the SharePoint endpoint as well, if you have the correct permissions set.

  • That makes sense. Further question then: I'm using Graph API to get access token for SharePoint and its working (requested permissions are granted and app principal is installed in AD of tenant owning the SharePoint site). The question is how do I use that app principal to create SharePoint app (or Office app, its confusing) which I will be able to run from office portal or even use as office/outlook addin. Hope its not too confusing
    – spery
    Commented Aug 17, 2016 at 22:12
  • The thing is that you don't create a Sharepoint app, there's no point. Just an ordinary Web site/app with Azure AD Authentication Commented Aug 18, 2016 at 6:36
  • That would be ideal case, however I need the SharePoint app in order to add custom actions to SharePoint (custom actions on EditControlBlock, etc.). I'll try to just upload the SharePoint app with ClientID = Azure AD app ID and see how it goes. Hopefully it would bind the app principal generated by consent framework with the uploaded SharePoint App. Will keep you posted.
    – spery
    Commented Aug 18, 2016 at 7:52
  • 1
    After further research I've found out that my use case requires 2 applications, one on Azure AD and one that is basically a SharePoint plugin. These two only work together as SharePoint plugin creates actions that point to Azure AD app.
    – spery
    Commented Aug 19, 2016 at 7:42
  • @Spery Can you please more details on how you implemented the authentication as i have the same requirement.
    – TARUN
    Commented Nov 20, 2017 at 9:11

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.