--- sourceDocument: Yokohama ServiceNow AI Platform Administration sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/platform-administration Release : - yokohama ft:locale : - en-US ft:publication_title : - Yokohama ServiceNow AI Platform Administration ft:clusterId : - platadm bundleId : - platadm workflow : - Platform --- # Create connector # Create a Microsoft SharePoint Online external content connector {#ariaid-title1} * Release version: Yokohama * * Updated February 11, 2026 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 8 minutes to read Create an external content connector to retrieve searchable content and security principals from your Microsoft SharePoint Online source system. ## Before you begin A source system administrator must have already configured your Microsoft SharePoint Online source system to allow access by the Microsoft SharePoint Online external content connector. For details on configuring these settings in the source system, see [Create a public/private key pair for the Microsoft SharePoint Online external content connector](https://www.servicenow.com/docs/pu0VjJ9fmcYM4J83IQsPuw "Generate a public/private key pair for the Microsoft SharePoint Online external content connector. Extract the public key as a DER-encoded binary X.509 format certificate for use in configuring API access for the connector in the Microsoft Entra admin center.") and [Configure Microsoft SharePoint Online for external content indexing](https://www.servicenow.com/docs/gbgkNPrRhTyYGJRwIYwXoQ "Register an OAuth 2.0 application in the Microsoft Entra admin center to grant the Microsoft SharePoint Online external content connector access to your Microsoft SharePoint Online source system."). Role required: sn_ext_conn.xcc_admin ## Procedure 1. Navigate to AllExternal Content ConnectorsExternal Content Admin Home. 2. If prompted, select Switch scope to switch to the External Content Connectors Admin scope. You must be in this scope to create or edit external content connectors. 3. In the Connectors section, select New. 4. On the Choose source page, select the SharePoint Online tile, then select Next. 5. On the Connection settings page, fill in the connection settings. {#create-ext-cont-connector-mspo__table_bvk_jcd_t2c__entry__2}{#create-ext-cont-connector-mspo__validate-connection-settings-ph} | Connection setting | Description | |-|-| | Connector name | Unique name for this Microsoft SharePoint Online external content connector. | | Application (client) ID | Application (client) ID for the OAuth 2.0 application defined in the Microsoft Entra admin center that grants access to your Microsoft SharePoint Online source system. If you have access to the OAuth 2.0 application's registration record in the Microsoft Entra admin center, you can navigate to Overview and copy this ID from the Application (client) ID field in the Essentials section. If you can't access the OAuth 2.0 application's registration record in the Microsoft Entra admin center, ask your Microsoft Entra administrator for the application's Application (client) ID value. | | Directory (tenant) ID | Directory (tenant) ID for the OAuth 2.0 application defined in the Microsoft Entra admin center that grants access to your Microsoft SharePoint Online source system. If you have access to the OAuth 2.0 application's registration record in the Microsoft Entra admin center, you can navigate to Overview and copy this ID from the Directory (tenant) ID field in the Essentials section. If you can't access the OAuth 2.0 application's registration record in the Microsoft Entra admin center, ask your Microsoft Entra administrator for the application's Directory (tenant) ID value. | | JKS Certificate | Java KeyStore (JKS) file containing a public/private key pair generated with the Java keytool utility. These keys must match the public key from the DER-encoded binary X.509 format certificate uploaded to the OAuth 2.0 application defined in the Microsoft Entra admin center that allows the Microsoft SharePoint Online external content connector to access your source system data. If you don't have a copy of the JKS file, ask your security administrator for it. You can't download the JKS file from the OAuth 2.0 application's registration record in the Microsoft Entra portal. | | JKS certificate password | Password for the Java KeyStore (JKS) file specified in JKS Certificate. If you don't have the password for the JKS file, ask your security administrator for it. You can't retrieve the JKS certificate password from the registration record for the OAuth 2.0 application defined in the Microsoft Entra admin center that allows the Microsoft SharePoint Online external content connector to access your source system data. | | JKS certificate thumbprint | Base64-encoded or hexadecimal SHA1 hash for the DER-encoded binary X.509 format public key certificate uploaded to the OAuth 2.0 application defined in the Microsoft Entra admin center that allows the Microsoft SharePoint Online external content connector to access your source system data. If you don't have this hash, ask your Microsoft Entra administrator for the SHA1 thumbprint hash for the application's DER-encoded binary X.509 format public key certificate, in either base64-encoded or hexadecimal format. | | Settings for regulated markets || | Configure settings for regulated markets | Option to display Authority endpoint and Graph API endpoint settings fields. | | Authority endpoint | URL for the Microsoft authorization server that you use to log in to your source system (Microsoft tenant). This field appears only when Configure settings for regulated markets is selected. Default value: https://login.microsoftonline.com/ Cloud service endpoint URLs include: * https://login.microsoftonline.com/: Endpoint URL for the Microsoft 365 cloud * https://login.microsoftonline.us/: Endpoint URL for the Microsoft 365 GCC and GCC High cloud and the Microsoft 365 DoD cloud {#create-ext-cont-connector-mspo__ul_bmk_3b5_pfc} If you don't know the authority endpoint URL to use, ask your Microsoft administrator for it. Important: The authority endpoint URL must end with a trailing slash. | | Graph API endpoint | Microsoft Graph API endpoint for your source system (Microsoft tenant). This field appears only when Configure settings for regulated markets is selected. Default value: https://graph.microsoftonline.com/ Microsoft Graph API endpoint URLs include: * https://graph.microsoftonline.com/: Endpoint URL for the Microsoft Graph global service cloud * https://graph.microsoftonline.us/: Endpoint URL for the Microsoft Graph for US Government L4 cloud * https://dod-graph.microsoftonline.us/: Endpoint URL for Microsoft Graph for US Government L5 (DOD) cloud {#create-ext-cont-connector-mspo__ul_upp_hms_rfc} If you don't know the Microsoft Graph API endpoint URL to use, ask your Microsoft administrator for it. Important: The Microsoft Graph API endpoint URL must end with a trailing slash. | | Validate connection settings with test crawl | Option to run a short test crawl to verify whether your connection settings and source system permissions are correctly set. For more details on validating connection settings and source system permissions with a test crawl, see [Verify your connection settings and source system permissions for an external content connector](https://www.servicenow.com/docs/AP8WNS3WS46ltJ3lrEx3ig "Check that connection settings and source system permissions are correctly specified for your external content connector. Perform this task to verify whether permission changes or revocations affect the connector's ongoing or scheduled crawls."). Important: For connectors that support user permission crawls, all searchable content and metadata indexed by the validation test crawl is public until the connector completes its first user permission crawl. This means the test crawl's content will be visible to all users of portals and search applications that the connector is linked to. | [Table 1. Connection settings] {#create-ext-cont-connector-mspo__table_bvk_jcd_t2c} Note: The Settings for regulated markets connection settings aren't shown for Microsoft SharePoint Online connectors that you created in versions of External Content Connectors prior to version 4.0. Starting in External Content Connectors version 4.0, these connection settings are shown when you create a new Microsoft SharePoint Online external content connector. 6. Save and validate your connection settings by selecting Validate Connection. Note: If validation of your connection settings fails, the system shows an error message. Verify your connection settings to ensure they're correct. If permissions required by the connector are missing or incorrectly configured in the source system, a warning message appears showing the permissions that must be corrected. Provide the information from this message to your source system administrator. {#create-ext-cont-connector-mspo__new-connector-save-connection-settings-cmd} 7. After your connection settings are validated, select Next. 8. On the Crawl settings page, modify any default crawl settings that you want to override for this connector, then select Next. If you want to skip this step for now, select Skip instead of Next. You can modify the crawl settings for this connector from the External Content Admin Home page. For details on this procedure and the available crawl settings, see [Configure crawl settings for a Microsoft SharePoint Online external content connector](https://www.servicenow.com/docs/Zeg3_hUuSsEOeKp_YmcYtg "Specify the sites you want your Microsoft SharePoint Online external content connector to crawl. Define inclusion or exclusion filters to dictate the types of content the crawl retrieves and feeds to AI Search for indexing."). {#create-ext-cont-connector-mspo__crawl-settings} {#create-ext-cont-connector-mspo__crawl-settings} 9. On the User permission settings page, modify any default user permission settings that you want to override for this connector. If you want to skip this step for now, select Skip instead of Next. You can modify the user permission settings for this connector from the External Content Admin Home page. For details on this procedure and user permission settings, see [Configure user permission settings for an external content connector](https://www.servicenow.com/docs/61IqHyAKjlUk0sNKovSmoA "Override the default field mappings for an external content connector's user permission crawls. Specify the fields that uniquely identify user security principals in your source system and users in your ServiceNow AI Platform instance. Optionally execute a custom script to transform security principal IDs before they're compared with the IDs of users in your instance."). {#create-ext-cont-connector-mspo__new-connector-user-mapping-settings-cmd} 10. On the Create crawl page, create a content crawl for this connector by selecting a crawl scope (if supported) and any desired options, then select Next. If you want to skip this step for now, select Skip instead of Next. You can create and run crawls for this connector from the External Content Admin Home page. For details on creating content crawls, see [Create a content crawl for an external content connector](https://www.servicenow.com/docs/cHKxITeSqLvmLnYo9QVnHg "Retrieve searchable content and metadata from your source system with a content crawl. Run the crawl as a one-time task or schedule it to run on a recurring basis."). 11. On the Connect search profile page, use the Connect to search profile field and Add button to add any search profiles that you want to connect this external content connector's default search source to, then select Save. If you want to skip this step for now, select Skip instead of Next. You can connect search sources for this connector to search profiles from the External Content Admin Home page. For details on connecting an external content connector to search profiles, see [Connect an external content connector to a search profile](https://www.servicenow.com/docs/m4wcX0hwKbI9DWhQaOTQfg "Make results from an external content connector searchable in your portals and search applications by connecting its search sources to your existing search profiles."). 12. Select Save. ## Result Your new external content connector appears in the Connectors list on the External Content Admin Home page. ## What to do next To retrieve searchable content and security principals with your new connector, you must configure and run content and user mapping crawls for it. You can modify your new connector's crawl settings and create crawls for it from the External Content Admin Home page even if you skipped these steps during connector creation. * To learn how to configure your new connector's crawl settings, see [Configure crawl settings for a Microsoft SharePoint Online external content connector](https://www.servicenow.com/docs/Zeg3_hUuSsEOeKp_YmcYtg "Specify the sites you want your Microsoft SharePoint Online external content connector to crawl. Define inclusion or exclusion filters to dictate the types of content the crawl retrieves and feeds to AI Search for indexing."). * For details on creating crawls for your new connector, see [Create a content crawl for an external content connector](https://www.servicenow.com/docs/cHKxITeSqLvmLnYo9QVnHg "Retrieve searchable content and metadata from your source system with a content crawl. Run the crawl as a one-time task or schedule it to run on a recurring basis.") and [Create a user permission crawl for an external content connector](https://www.servicenow.com/docs/qWGajmyPchw0rgi0C28swg "Retrieve security principals from your source system with a user permission crawl. Run the crawl as a one-time task or schedule it to run on a recurring basis."). {#create-ext-cont-connector-mspo__ul_zkt_3qj_4fc} To make content crawled by your new connector searchable in portals and search applications, you must link one of its search sources to the search profile used by each portal or search application. You can use the connector's default search source or create your own custom search sources. Default search source : By default, the system creates a search source that includes all content from your external content connector's indexed source. Custom search sources : You can create your own search sources with filters to specify which content from the connector's indexed source is searchable. To view the connector's indexed source, navigate to AllAI SearchAI Search IndexIndexed Sources. For information about creating search sources, see [Search sources in AI Search](https://www.servicenow.com/docs/Lh3hgMrXzdsivyY0rZSrnw "Define search sources to make your searchable content available in search experiences. Choose an indexed source and configure optional filter conditions to limit the content that users can search."). You can link connector search sources to search profiles from the External Content Admin Home page. For details on this procedure, see [Connect an external content connector to a search profile](https://www.servicenow.com/docs/m4wcX0hwKbI9DWhQaOTQfg "Make results from an external content connector searchable in your portals and search applications by connecting its search sources to your existing search profiles."). *[\>]: and then