Connect SharePoint to Uku

• Company Admins and Company Owners with access to Settings & Apps, on the Elite plan.
• Setting up the prerequisites in Microsoft Azure usually requires a Microsoft 365 / Azure AD administrator at your firm. If you do not have access to your company’s Azure portal, ask your IT contact to complete the Azure steps and share the four values with you.

Once SharePoint is connected through the Documents app, Uku creates per-client folders inside a main folder you choose on a SharePoint site, and syncs files from tasks, emails, and the Client Portal there. The connection uses the Microsoft Graph API with an Azure AD app registration — Uku authenticates as the registered application using a client secret, not as an individual user.

You will need four values to complete the connection. Three of them come from registering an application in Azure Active Directory; the fourth is the URL of the SharePoint site you want to use.

1. Sign in to the Microsoft Azure portal with an account that has permission to register apps.
2. Open Azure Active Directory (now also called Microsoft Entra ID).
3. Go to App registrations and click New registration.
4. Give the app a name (for example, Uku Documents) and complete the registration.

1. Open the registered app’s overview.
2. Copy Application (client) ID — this is your Client ID in Uku.
3. Copy Directory (tenant) ID — this is your Tenant ID in Uku.

1. In the app’s left menu, open Certificates & secrets.
2. Click New client secret, give it a description and an expiry.
3. Copy the Value of the secret immediately — Azure only shows it once. This is your Client Secret in Uku.

1. In the app’s left menu, open API permissions.
2. Add a permission for Microsoft Graph → Application permissions.
3. Add at minimum Sites.Read.All for read-only access. To allow Uku to upload files, create folders, and download files (which is what the Documents app actually does), grant Sites.ReadWrite.All instead.
4. Click Grant admin consent for your tenant.

Open the SharePoint site you want Uku to use and copy the URL from the address bar. It looks like https://yourcompany.sharepoint.com/sites/yoursite.

Path: Settings & Apps → Documents → Settings tab

1. Open the Documents app and switch to the Settings tab. If the Documents app is not active yet, activate it from the Overview tab first.
2. In the list of supported services, find SharePoint and click Connect.
3. Paste the four values into the connection dialog:
   • Site URL — the SharePoint site URL from step 5.
   • Client ID — the Application (client) ID.
   • Tenant ID — the Directory (tenant) ID.
   • Client Secret — the secret value you copied in Azure.
4. Click Connect. Uku tests the connection by listing the site’s drive — if anything is wrong, you will see an error in the dialog and nothing is saved.

After a successful test you are returned to the Settings tab with SharePoint marked as connected. Pick the Main folder under which Uku should create per-client folders, then configure the rest of the Documents app the same way as for Google Drive or Dropbox. See Documents app — Google Drive and Dropbox integration for the full Settings tab reference (folder structure, public/private, year/month, backup options).

Files uploaded to tasks, sent into the Mailbox, or attached through the Client Portal are saved into the SharePoint folder structure Uku creates under your chosen Main folder. Opening a file from a client view in Uku takes you straight into SharePoint — there is no Uku-side download step.

You can only have one cloud storage provider connected at a time. To switch from SharePoint to another provider (or vice versa), open the Documents app Settings tab and click Disconnect on the active service first, then connect the new one. Disconnecting does not delete files already synced to SharePoint — it only stops new uploads from flowing.

Check each of the four values:

• Site URL must be a full https://...sharepoint.com/sites/<name> URL, not just the hostname.
• Tenant ID is the Directory (tenant) ID from the Azure AD overview, not the friendly tenant name.
• Client Secret is the Value of the secret, not the Secret ID. If you forgot to copy it when it was created, generate a new one in Azure — the value is shown only once.

If all four look correct, verify in Azure that the app registration has Microsoft Graph → Sites.Read.All (or Sites.ReadWrite.All) under Application permissions and that admin consent has been granted for your tenant.

Uploads need write access. If you only granted Sites.Read.All, Uku can list folders and confirm the connection but cannot upload. Add Sites.ReadWrite.All in Azure under API permissions, click Grant admin consent, and try again.

Most often the Azure client secret has expired. Open the Azure app registration, go to Certificates & secrets, create a New client secret, and re-save the connection in Uku with the new value. Plan the next rotation before that expiry date.

These actions require Azure AD administrator privileges in your tenant. Most users at a company do not have this by default. Ask your IT or Microsoft 365 administrator to register the app and grant consent, then share the four values with you for the Uku side.

Uku reads the default document library (drive) of the SharePoint site you point at. If the site has multiple document libraries and you want a non-default one, contact Uku support — selecting a specific drive is not exposed in the connection dialog.