Issues creating Microsoft SharePoint OAuth2 API credentials

Questions
1

Describe the problem/error/question

I’m unable to create credentials for the Microsoft SharePoint OAuth2 API.

I’m following these docs where it mentions to enter the client ID and secret once the app has been registered.

When creating the Microsoft SharePoint OAuth2 API credential there is only an option for the subdomain

Screenshot at Jun 12 10-01-19
Screenshot at Jun 12 10-01-191654×1304 221 KB

I’ve found a similar forum post describing the same issue…but the provided links don’t solve the problem. They just link back to the documentation I was already using.

What is the error message (if any)?

I’ve created the Microsoft Application, according to the documentation instructions and added my correct subdomain in the Microsoft SharePoint OAuth2 API credentials section. This is the error message I receive

Received following query parameters: {"error":"invalid_client","error_description":"AADSTS650057: Invalid resource. The client has requested access to a resource which is not listed in the requested permissions in the client's application registration. Client app ID: aad843ca-42a7-4219-a3f9-91bcf621d795(n8n). Resource value from request: https://btrmntai.sharepoint.com. Resource app ID: 00000003-0000-0ff1-ce00-000000000000. List of valid resources from app registration: 00000003-0000-0000-c000-000000000000. Trace ID: 5678ad2c-26e6-491e-ba17-cb831c461d00 Correlation ID: 33e1ffcc-77c4-4f13-a7d0-2d2eba929393 Timestamp: 2025-06-12 15:06:36Z","state":"eyJ0b2tlbiI6IlNCQnNEUzNoLTJWT3BJUzNTcDJsRndYSjFrQ3pHc2ZjMGpqZyIsImNpZCI6ImZuRzlSekEySjlyazBTNHkiLCJjcmVhdGVkQXQiOjE3NDk3NDA3OTI1MDgsImhvc3QiOiJtYXJpby1idHJtbnQuYXBwLm44bi5jbG91ZC9yZXN0In0="}

Screenshot at Jun 12 10-12-56
Screenshot at Jun 12 10-12-561152×1538 131 KB

Please share your workflow

Information on your n8n setup

  • n8n version: 1.97.1
  • Database (default: SQLite):
  • n8n EXECUTIONS_PROCESS setting (default: own, main):
  • Running n8n via (cloud):
  • Operating system: MacOS 15.5
2

You can try any of these (hope it helps)

–>Add real SharePoint rights to your Azure app

  1. Azure Portal → App registrations → your app.
  2. API permissions → Add permission → search “SharePoint” (ID 00000003-0000-0ff1-ce00-000000000000).
  3. Tick AllSites.Read (or ReadWrite if you need uploads).
  4. Click Grant admin consent.
  5. Wait a minute, then hit Connect my account in n8n again.

–>Forget a custom app and use n8n’s built-in Graph login

In the credential list choose Microsoft Graph (or “Microsoft SharePoint” if it shows “Uses n8n cloud app”), not the “OAuth2 API” one that asks for a sub-domain.
Login with the same tenant account, then in your node pick that credential.

The hosted n8n Graph app already has the right SharePoint + Graph scopes, so you skip the whole permission setup. Many users find this the fastest workaround.