Forum Discussion

MathieuSGA's avatar
MathieuSGA
Advocate I
3 months ago

Programmatically add a user to the SharePoint UIL from Fabric after ACS retirement?

Hello Fabric Community,   I'm facing a roadblock with SharePoint integration from Microsoft Fabric, and I hope you can help clarify the modern, supported approach.   Context and app registration ...
data engineering
notebook
v-hjannapu's avatar
v-hjannapu
Community Support
3 months ago

Hi MathieuSGA,

Yes, the screenshot you shared shows the correct area in Azure where the certificate gets attached to the App Registration under the Certificates tab. Typically, the certificate itself is first generated externally (for example via PowerShell or Azure Key Vault) as a .cer + .pfx pair and then the public certificate is uploaded there. Your Fabric notebook approach is also aligned with the current MSAL + certificate + Key Vault pattern Microsoft recommends for modern SharePoint app-only authentication.

The general flow would be to generate a certificate, upload the public certificate to the App Registration, store the PFX securely in Key Vault, retrieve it from Fabric at runtime and then use MSAL certificate authentication instead of a client secret to acquire the SharePoint token.

That said, I would still treat this as a validation step specifically for /_api/web/ensureuser. Microsoft documents certificate-based Entra app-only authentication for SharePoint Online REST APIs generally, but I could not find clear documentation confirming that /_api/web/ensureuser specifically supports app-only execution. So, the setup itself looks correct, but ensureuser may (mostly not) still reject the token requiring delegated user context.

Hope it helps to resolve your issue.
Regards,
Community Support Team.

v-hjannapu's avatar
v-hjannapu
Community Support
2 months ago

Hi MathieuSGA,
I hope the information provided above assists you in resolving the issue. If you have any additional questions or concerns, please do not hesitate to contact us. We are here to support you and will be happy to help with any further assistance you may need.

Regards,
Community Support Team.

  • v-hjannapu's avatar
    v-hjannapu
    Community Support
    2 months ago

    Hi MathieuSGA,
    I hope the above details help you fix the issue. If you still have any questions or need more help, feel free to reach out. We are always here to support you.


    Regards,
    Community Support Team.

    • MathieuSGA's avatar
      MathieuSGA
      Advocate I
      2 months ago

      The resolution process is "On Hold" for now since I need my Azure Admin to help me implement the provided approach

      • v-hjannapu's avatar
        v-hjannapu
        Community Support
        2 months ago

        Hi MathieuSGA,
         Thanks for the update, please do let us know once it is solved. If you have any other issues, please feel free to create a new post, we are always happy to help.

        Regards,
        Community Support Team.