Forum Discussion
Authentication to Sharepoint via Workspace Identity
- 10 months ago
Hi Bodyes,
Today, those SharePoint connectors don’t support Workspace identity, so the Service can’t acquire a token with that auth type and you get “The credentials provided for the SharePoint source are invalid.”
Quick solution
1) Don’t use Workspace identity for SharePoint (for now). Use a Service Principal (“app-only”) or a standard Organizational account.
2) You do not need Premium just to refresh a dataset that reads SharePoint with a Service Principal. Pro is fine.
3) If you choose Service Principal, grant it “Sites.Selected” on both Microsoft Graph and SharePoint, and then explicitly grant the app access to the specific site. Finally, set dataset credentials in the Service to OAuth2 > Service principal.If you found this helpful, consider giving some Kudos. If I answered your question or solved your problem, mark this post as the solution.
Hi Bodyes,
I believe you need to use the legacy permissions for the service principal and grant access directly in the sharepoint site at this page: /_layouts/15/appregnew.aspx
If you found this helpful, consider giving some Kudos. If I answered your question or solved your problem, mark this post as the solution.
Hi tayloramy
There is information saying that ACS will no longer be able to access SharePoint after april 2026 so is it good idea to even try this solution? What is more, should I create new app or try to grant permissions via _layouts/15/appinv.aspx?
- tayloramy10 months agoSuper User
Hi Bodyes,
Yes, the legacy permissions are end of life, but they are also the only permissions that work with Fabric, so I guess pick your battles, if you want to do this now, use the legacy permissions, if you don't want to use anything that is end of life soon, wait until Fabric has a better solution and updated sharepoint permission flows.
If you found this helpful, consider giving some Kudos. If I answered your question or solved your problem, mark this post as the solution.
- Rahel4 months agoAdvocate IItayloramy I am encountering the same issue; however, the latest documentation indicates that workspace identity is now supported do you happen to have another solution we could try? SharePoint Online File (Preview) connector overview - Microsoft Fabric | Microsoft Learn
- tayloramy4 months agoSuper User
Hi Rahel,
The previous solution of using /_layouts/15/appregnew.aspx is no longer supported as Sharepoint ACS is retired.
Now you need the Sites.Selected permission in Azure, or the Site.Read.All permissions.
See this blog post from another user:
How do I securely connect Microsoft Fabric to SharePoint after the ACS retirement? - Hey Niels