The idea is:
SharePoint node only supports credentials of type Microsoft SharePoint OAuth2 API however in GCC High SharePoint can only be accessed with Graph so it is needed to allow Graph credential on SharePoint nodes.
The SharePoint OAuth2 credential in n8n is built for commercial Microsoft 365, where:
-
SharePoint Online supports OAuth2 v2.0 delegated permissions
-
The resource
https://<tenant>.sharepoint.comis valid -
.defaultscopes work for application permissions
But in GCC High, Microsoft does not support:
-
SharePoint Online as an OAuth2 v2.0 delegated resource
-
.defaultscopes for SharePoint -
SharePoint Online as a v2 identity platform resource at all
GCC High requires Microsoft Graph for delegated access to SharePoint content.
But the n8n SharePoint node does not allow Graph credentials, so it forces a flow that GCC High cannot support.
This is why your Azure app looks perfect but the OAuth request still fails.