As of sFiles Summer '21, full-featured sFiles component is available in Experience Cloud when using Per-User authentication. Read more: Use full sFiles features in Experience Cloud (Community)

Prerequisites

• sFiles Community license must be enabled.
• sFiles version 1.21.4 or newer
• sFiles is set up for the organization.
• A per user Named Credential is set up.

Steps

1. Set up Azure's App Registration to work with your Experience Cloud Site.

   In the Azure App Registration, add the Experience Cloud Site's (Community) Callback URL to the application's Redirect URI.

   To find the URL, in Salesforce Setup, navigate to Identity > Auth. Providers. Find the sFiles Auth Provider, (by default named "sFilesProvider") and click the Name.

   In Microsoft Azure, Navigate to your App Registration for sFiles. In Authentication, add the Salesforce Callback URL to the Redirect URI list, and click Save.

   

2. Create a Named Credential Authentication record for each Experience Cloud user.

   When using Per User authentication, every user must authenticate individually with their own Microsoft 365 account. sFiles uses Salesforce's Named Credential to accomplish this, thus each user will need their own Named Credential authentication record. This can be accomplished through automation (using Flows for example) or manually.

   To manually create an authentication record, navigate to the Experience Cloud user's detail page.

   Scroll down to the section Authentication Settings for External Systems.

   Click New.

   

   Use the values as described below:

   External System Definition: Named Credential

   Named Credential: (Pick the sFiles Auth Provider)

   User: Experience Cloud user to give sFiles access

   Authentication Protocol: OAuth 2.0

   Start Authentication Flow on Save: Unchecked

    

   Click Save.

3. If you have already configured the Experience Cloud in the default Named Principal mode, proceed to step 4. Otherwise, configure the Experience Cloud per How to set sFiles Enterprise up on Experience Cloud.
4. Specify the Per User Named Credential in Experience Cloud SharePoint Object Settings.

   Remember to specify the correct Named Credential name in the Experience Cloud SharePoint Object Setting Named Credential field (Custom Metadata Type).

5. Authenticate each Experience Cloud user with Microsoft.

   Now that the Experience Cloud user has their own Named Credential authentication ready to be utilized we need to provide a link for the Experience Cloud user to click that will allow them to self-authenticate their Salesforce user with Microsoft. This link requires the following format:

   [Experience Cloud Site]/services/auth/xds/[Auth Provider Name]?startURL=%2F[15-character User Named Credential Authentication Record Id]%3Fisdtp%3Dp1
   

   An example might look like this:

   https://contoso-community.com/services/auth/xds/sFilesProvider?startURL=%2F0XU5w000000fyLk%3Fisdtp%3Dp1
   

   Now when the Experience Cloud user clicks on this link it should automatically redirect them to log in to their Microsoft 365 account and return them back to the Experience Cloud. This will complete the one-time authentication process and link the Microsoft 365 account to the user's Salesforce user.