Is it possible to grant access to an App Registration from another Azure AD using
We provide a service where we offer to upload files to our clients' SharePoint (using SharePoint.Client objects). Currently we are doing this by asking the client to create a Client Id using
_layouts/15/AppRegNew.aspx, and then grant that Client Id access to a Document Library using
_layouts/15/AppInv.aspx, and then provide us with the Client Id and Client Secret.
But as more and more SharePoint tenant are set up with
DisableCustomAppAuthentication=True, this no longer works. As an attemp to work around this, we have created an App Registration (Multi-tenant) in our Azure AD following the instructions in https://docs.microsoft.com/en-us/sharepoint/dev/solution-guidance/security-apponly-azuread. The App is created with
Sites.Selectedchecked under API Permissions. And this App Id we can use to access our own SharePoint (with
DisableCustomAppAuthentication=True), after using
_layouts/15/AppInv.aspx to give it access to a document library.
Is there any way for other SharePoint tenants to grant our App Id access to a specific Document Library in their SharePoint?
We have done a similar things to access our Clients' Business Central tenants, and here the client just has to enter our App Id, and the Grant access to the App inside BC.