[GH-ISSUE #3] Feature Request: Sharepoint Certificate Authentication #1

New issue

Closed

opened 2026-10-18 21:13:19 +00:00 by bsakaguchi · 2 comments

bsakaguchi commented

2026-10-18 21:13:19 +00:00

Owner

Originally created by @arjunghoshal on GitHub (May 27, 2026).
Original GitHub issue: https://github.com/open-webui/oikb/issues/3

Check Existing Issues

I have searched for all existing open AND closed issues and discussions for similar requests. I have found none that is comparable to my request.

Verify Feature Scope

I have read through and understood the scope definition for feature requests in the Issues section. I believe my feature request meets the definition and belongs in the Issues section instead of the Discussions.

Problem Description

Currently, the only supported SharePoint authentication method is using a client ID and client secret to get an access token for use in future requests.

# Get access token.
token_resp = httpx.post(
    f"https://login.microsoftonline.com/{tid}/oauth2/v2.0/token",
    data={
        "grant_type": "client_credentials",
        "client_id": cid,
        "client_secret": secret,
        "scope": "https://graph.microsoft.com/.default",
    },
)

However, SharePoint also supports certificate based authentication, which is considered more secure and is the best practice form of authentication in production scenarios.

Desired Solution you'd like

Add the option to use a client ID and certificate to authenticate with a SharePoint site, perhaps through the addition of an optional environment variable called SHAREPOINT_CERTIFICATE_PATH which is mutually exclusive with SHAREPOINT_CLIENT_SECRET.

Alternatives Considered

No response

Additional Context

No response

Originally created by @arjunghoshal on GitHub (May 27, 2026). Original GitHub issue: https://github.com/open-webui/oikb/issues/3 ### Check Existing Issues - [x] I have searched for all existing **open AND closed** issues and discussions for similar requests. I have found none that is comparable to my request. ### Verify Feature Scope - [x] I have read through and understood the scope definition for feature requests in the Issues section. I believe my feature request meets the definition and belongs in the Issues section instead of the Discussions. ### Problem Description Currently, the only supported SharePoint authentication method is using a client ID and client secret to get an access token for use in future requests. ``` # Get access token. token_resp = httpx.post( f"https://login.microsoftonline.com/{tid}/oauth2/v2.0/token", data={ "grant_type": "client_credentials", "client_id": cid, "client_secret": secret, "scope": "https://graph.microsoft.com/.default", }, ) ``` However, SharePoint also supports certificate based authentication, which is considered more secure and is the best practice form of authentication in production scenarios. ### Desired Solution you'd like Add the option to use a client ID and certificate to authenticate with a SharePoint site, perhaps through the addition of an optional environment variable called `SHAREPOINT_CERTIFICATE_PATH` which is mutually exclusive with `SHAREPOINT_CLIENT_SECRET`. ### Alternatives Considered _No response_ ### Additional Context _No response_

bsakaguchi referenced this issue

2026-10-18 21:13:20 +00:00

[GH-ISSUE #1] feat: Service Now integration #3

bsakaguchi closed this issue

2026-10-18 21:13:20 +00:00

bsakaguchi commented

2026-10-18 21:13:20 +00:00

Author

Owner

@tjbck commented on GitHub (May 28, 2026):

Added!

@tjbck commented on GitHub (May 28, 2026): Added!