OneDrive Image Slideshow Widget - Migration guide
The migration from Legacy Authentication to Microsoft Graph v2.0 with Secure Site Access provides a more secure and modern way to connect and manage your data sources. This update ensures improved security, better performance, and alignment with current Microsoft standards.
This functionality is supported for the widget Image Slideshow. By migrating to Microsoft Graph v2.0, these widgets can securely access and display data while maintaining reliable integration with your environment.
The Image Slideshow Widget can be downloaded from here:
http://http://install.gobright.cloud/temp/widget/Widget-OneDrive_SlideShow.gbexport
🚨 Urgent Migration Required
Legacy authentication methods will be retired. All widgets using password grant or broad permissions must be migrated to Microsoft Graph v2.0 with secure Sites.Selected permissions.
- ✅ More secure authentication without storing user passwords
- ✅ Production-ready and Microsoft recommended
- ✅ Future-proof against authentication changes
- ✅ Granular access control – sites only as needed
Secure SharePoint Approach
🔒 Security-First Migration
This migration uses the SharePoint approach with Sites.Selected permissions for maximum security:
- ✅ Granular access control – Access only to specifically configured SharePoint sites
- ✅ Production-grade security – Microsoft-recommended approach for enterprise
- ✅ Audit-friendly – Clear permissions and access tracking
- ✅ Future-proof – Secure authentication without broad permissions
Note: Previously offered dual-path approach has been removed for security reasons. OneDrive approach with Files.Read.All would expose all files across the ecosystem.
Step 1: Create Azure AD App Registration
- Go to Azure Portal → Azure Active Directory → App registrations
- Click “New registration” and create your app
- Note your Application (client) ID and Directory (tenant) ID
- Go to “Certificates & secrets” → Create new Client Secret
- Copy the secret value immediately (you won’t see it again)
Step 2: Configure API Permissions
Choose permissions based on your file access approach:
SharePoint Sites.Selected Permission (Secure):
- Go to “API permissions” in your app registration
- Add permission → Microsoft Graph → Application permissions
- Add:
Sites.Selected - Click “Grant admin consent”
Step 3: Test Authentication
Verify your app credentials work with Microsoft Graph:
Step 4: Discover Your Site ID (for SharePoint Approach)
Use Microsoft Graph Explorer to find your site ID:
- Open Microsoft Graph Explorer
- Sign in with an account that has access to your SharePoint site
- Modify permissions to include
Sites.Read.AllorSites.Selected - Run this query (replace “YourSiteName” with your actual site name):
The response will contain site information:
Copy the site ID – you’ll need it for both configuration and Sites.Selected setup.
Step 5: Configure Sites.Selected Permissions (for SharePoint Approach)
Grant your app access to specific SharePoint sites using Graph Explorer:
Replace with your actual site ID from Step 4 and your-app-client-id with your Azure app’s client ID.
Success response indicates your app now has read access to that specific SharePoint site only.
Further in this article you can check the information for each Image Slideshow widget.
Image Slideshow Widget configuration
Purpose: Display rotating images from SharePoint folders with secure access control
There are three available configuration options for setting up the widget. It is recommended to use only one option at a time to ensure a clear and stable configuration.
Regardless of the option you choose, the first three fields – Tenant ID, Client ID, and Client Secret – are mandatory. These values remain the same and must be provided for all three configuration methods, as they establish the required connection and authentication.
Review the requirements for each of the three options listed below.
Option A (site selected)
If you choose to configure this option, you need to fill in the site name ID which is received via step 4.
Option B (site selected)
If you choose this option B, two fields are required. You need to complete the Hostname and the SharePoint Site Name.
Option C (read all)
In case you decide to complete this option, you should fill in only the Sharepoint Site Name.
Supported Image Types:
- JPEG (.jpg, .jpeg)
- PNG (.png)
- GIF (.gif)
Features:
- ✅ Automatic thumbnail generation
- ✅ Image caching for performance
- ✅ Direct download URLs
- ✅ Metadata extraction (size, type, etc.)
🎯 Migration Summary
Your widget is now ready for production with modern, secure authentication:
- ✅ Slideshow widgets: Display image collections from SharePoint with thumbnails
- ✅ Security-first: Sites.Selected permissions for granular access control
- ✅ Future-proof: Microsoft Graph v2.0 with client credentials
- ✅ Enhanced performance: Optimized API calls and caching
