Skip to main content
Version: Next

How to set up SharePoint integration

Overview​

This guide explains how to integrate Redtrust with your SharePoint environment so users can sign documents directly from their libraries—without downloading them. The integration relies on Azure as the identity provider and requires configuration in both Azure and Redtrust. While this guide covers the setup needed to enable the signing capability, you’ll need a workflow to manage how documents are sent for signing and returned (for example, the steps users follow to trigger a signature). This workflow's documentation—typically built with tools like Power Automate—is outside the scope of this guide.

Before you start​

Check whether your license includes the SharePoint integration module. To do this:

  1. Go to the admin console.
  2. Navigate to System > Unit > License.
  3. In Unit settings and status > Available modules, verify that SharePoint integration is listed.

Set up Azure​

Step 1: Register Redtrust​

To set up Azure for SharePoint integration, register a new application:

  1. Go to Home > App registrations and click on + New registration.
  2. Fill out the form as follows:
    1. In Name, enter the name you prefer. In this example, redtrust-app.
    2. Select Accounts in this organizational directory only.
    3. Select Single-page application (SPA) and add https://REDTRUST_IP/personal/signtrust.
    4. Click Register.
  3. In the overview section, copy the Application (client) ID and Directory (tenant) ID.

Step 2: Define access and ID tokens​

  1. In the sidebar, go to Manage > Authentication and check the redirection URI.
  2. In the Implicit grant and hybrid flows section, select:
    • Access tokens (used for implicit flows)
    • ID tokens (used for implicit and hybrid flows).
  3. Click Save.

Step 3: Add permissions​

  1. Go to Manage > API permissions and click Add a permission.
  2. Click Microsoft graph and Delegated permissions.
  3. In the OpenId section, select all four options:
    • email
    • offline_access
    • openid
    • profile
  4. In the Files section, select:
    • Files.Read
    • Files.Read.All
    • Files.ReadWrite
    • Files.ReadWrite.All
  5. In the Sites section, select:
    • Sites.Read.All
    • Sites.ReadWrite.All

Set up Redtrust​

Step 1: Add app registration details​

To configure Redtrust, use application ID and directory ID you copied in Step 1.

  1. Go to System > Services > SharePoint configuration (Azure App).

  2. Enter the values for, Application ID (ClientID) and Directory ID (TenantID).

Step 2: Optional configuration​

You can optionally define SharePoint access for users within a specific domain. To do this:

  1. Go to Access > Domains and select a domain.

  2. In the General section, select the SharePoint option.

Signtrust endpoint for workflow integration​

When configuring your signing workflow in Power Automate, you’ll need to send documents to the Signtrust signing endpoint.

Use the following URL:

https://REDTRUST_IP/personal/signremote/signremotedocument?jsonBase64=BASE64_ENCODED_PARAMETERS

Replace REDTRUST_IP with the IP address or domain of your Redtrust instance, and BASE64_ENCODED_PARAMETERS with a base64-encoded string. This string has to be a JSON object with the following parameters:

    {
    "driveId": "b!q2wJu5WgZEiqahqoPmJcnEKRV9k2K75IrlGpprAS4_aTDIcxwASjTIIfH1T04_-K",
    "driveItemId": "014YINEYBE5XXQHMP3NRELYONHGZJJ4EFM",
    "mode": "new",
    "suffix": "_signed",
    "domain": ""
    }

The resulting string from encoding this JSON in base64 has to be appended to the endpoint URL path, as in this example:

https://REDTRUST_IP/personal/signremote/signremotedocument?jsonBase64=e
woiZHJpdmVJZCI6ICJiIXEyd0p1NVdnWkVpcWFocW9QbUpjbkVLUlY5azJLNzVJcmxHcHByQVM0X2FUREljeHdBU2pUSUlmSDFUMDRfLUsiLAoiZHJpdmVJdGVtSWQiOiAiMDE0WUlORVlCRTVYWFFITVAzTlJFTFlPTkhHWkpKNEVGTSIsCiJtb2RlIjogIm5ldyIsCiJzdWZmaXgiOiAiIgp9
important

To understand the JSON parameters better, see Signing endpoint parameters table.

Summary​

This setup establishes the connection between SharePoint, Azure, and Redtrust, laying the groundwork for document signing directly from SharePoint libraries. To complete the integration, you now need to implement a workflow—using tools like Power Automate—that defines how documents are sent for signing and returned.