Upcoming Feature
Sharepoint Authentication
Two new SharePoint authentication options give security-conscious firms more control over how Harvey connects — limit access to a single SharePoint site, use the firm’s own Microsoft app instead of Harvey’s, or both.
What’s Coming
Harvey will be introducing two new Sharepoint Authentication modes: 1) Site-limited mode that restricts Harvey to a single SharePoint site the customer chooses, with Microsoft enforcing the boundary at the tenant level, 2) A custom Entra app option that lets users sign in through an app the customer’s own IT team registers and governs in Entra, instead of Harvey’s app. The two options can be used independently or combined for customers who want both a single-site boundary and full ownership of the app.
Feature Highlights
- Site-limited mode restricts Harvey to one SharePoint site — Microsoft enforces the boundary, not a vendor promise
- Custom Entra app lets users authenticate through the customer’s own app registration instead of Harvey’s
- Both options can be combined for customers who want a single-site boundary and full app ownership
- Harvey’s access scope doesn’t change — it can only reach what each signed-in user can already open in SharePoint
- Customer owns and controls the app — its permissions, its secret, and whether it stays enabled
- Unblocks security reviews at firms where third-party app consent or broad SharePoint access has been a sticking point
FAQs
Q: Does using either option change what Harvey can access?
No. Harvey can still only reach what each signed-in user is already permitted to open in SharePoint. These options change how the connection is authenticated and scoped — not what individual users can access.
Q: Can both options be used together?
Yes. Customers who want both their own app registration and a single-site boundary can combine site-limited mode with the custom Entra app option.