SharePoint Developer topics

Central News Help

Welch — Wed, 18 Feb 2026 18:44:03 GMT

Hello everyone,

I’m looking for guidance on using SharePoint to distribute department updates across multiple locations, with an administrator controlling who sees each update.

Our organization uses a dedicated Microsoft Team for each location (27 total). A single update may need to be shared with one location, several locations, or all 27. Conceptually, I have a solid understanding of how this should work, but I’ve run into some practical roadblocks, and Copilot hasn’t quite gotten me where I need to be.

Here’s the workflow I’m envisioning:

A Department Head submits an update via a Microsoft Form.
The form responses are stored in a SharePoint List on a central “News Hub” site.
An Admin reviews the submission, makes edits if necessary, selects one or more target locations, and publishes the update.
Each update includes a publish date and an expiration date, since these updates are used for monthly meetings at each location.

Based on the selected target locations, the update would either:

Display on a SharePoint site associated with the corresponding Team(s), or
Remain on a centralized News Hub as an additional page that can be embedded on a TEAM channel.

The page itself would contain both static content and dynamic monthly updates. The updates should be visible as text only (not clickable), as I want managers to see the information without navigating away from the page.

The final output would be embedded into a Teams channel, allowing each location’s manager to see only the updates targeted to their specific office.

From my understanding, this aligns with a “hub-and-spoke” news model, using:

Microsoft Forms
SharePoint Lists
Power Automate (triggered when a list item is modified)
Logic to route or display updates to the appropriate locations

I’d prefer to avoid building a Power App if possible, but I’m open to it if that’s the only viable solution.

Also, I have complete rights to the Central News Hub and the Sharepoint and Team site that I am testing on.

Any advice, best practices, or examples of similar implementations would be greatly appreciated.

Thank you in advance.

Visualizing SharePoint List Relationships as ER Diagrams

reire — Mon, 16 Feb 2026 14:08:02 GMT

In several SharePoint-based projects, I encountered the same challenge. As solutions grow, list relationships become increasingly difficult to understand.

This is especially true in environments with multiple lookup columns, implicit relational structures, and long-lived tenant environments where schemas evolve over time.

Although SharePoint provides rich metadata, there is no built-in way to visualize list relationships as an ER diagram.

To explore this problem, I built a small browser extension that extracts list and column metadata from a SharePoint site, detects lookup relationships, and generates PlantUML-based ER diagram code. It can also export structured definitions to Excel.

The goal is not only diagram generation, but improving architectural visibility, impact analysis during schema changes, documentation quality in long-term projects, and migration planning such as moving SharePoint lists to Dataverse.

I am particularly interested in how other developers document SharePoint list structures in larger environments.

The extension itself is available here:
https://chromewebstore.google.com/detail/sharepoint-erd-generator/nbjfcilmndpofckndmcadgfcacadgeak

I would appreciate any feedback or discussion around approaches to SharePoint schema documentation.

Viva Learning – SharePoint content provider configured but content not appearing in Teams

rosamartinamilazzo25 — Thu, 29 Jan 2026 14:08:22 GMT

Hi everyone,

I’m configuring Viva Learning in Microsoft Teams and I’m trying to use SharePoint as a content provider to publish custom learning content (Word, PowerPoint, Excel, PDF, audio, video, and web links).

What I’ve done so far:

Created a dedicated SharePoint site.
Waited about one hour before adding it as a SharePoint provider in Viva Learning.
After the configuration, the “Learning App Content Repository” list was automatically created.
In the document library, I uploaded:
- PDF files
- a web link
I copied the folder URLs and added them to the Learning App Content Repository list.
I also followed the official procedure to create and assign a Microsoft 365 Group, as described in this documentation:
https://learn.microsoft.com/en-us/viva/learning/sharepoint-permissions

The issue:

Almost 24 hours have passed, but I still don’t see any content in Viva Learning (Teams).
In the sync logs, I can see that synchronization jobs are running, but the content is either not appearing or only partially synchronized.

At this point, I’m not sure:

if I’m missing something in the SharePoint provider configuration,
if the folder URLs are incorrect,
or if there’s some additional requirement related to permissions or metadata.

Has anyone experienced a similar issue or can suggest what I should check next?

Thanks in advance!

Group Calendar Web Part Pop Up Color

ShawnHopper — Fri, 19 Dec 2025 16:56:16 GMT

We have created a branding theme for modern sharepoint sites to match corporate colors. When clinking on a Group Calendar event, the pop up now applies a background color we didn't have in the theme as primary or secondary. Just seems to be auto selected by SP. It's too dark to read the text. I've found the Them in the classic _catalog Theme Gallery and can pull the theme into NotePad to read it but can't seem to tell which variable controls the background of pop ups. Just need it to be white (ffffff). Anyone have a solution?

{"name":"(Company Theme Name)","isInverted":false,"palette":{"themeDarker":"#243360","themePrimary":"#17244C","themeSecondary":"#5e6d9b","themeTertiary":"#7885af","themeLight":"#94a0c2","themeLighter":"#b3bcd6","themeLighterAlt":"#d6dbea","black":"#000000","neutralDark":"#201f1e","neutralPrimary":"#323130","neutralPrimaryAlt":"#3b3a39","neutralSecondary":"#605e5c","neutralTertiary":"#a19f9d","neutralTertiaryAlt":"#c8c8c8","neutralLight":"#eaeaea","neutralLighter":"#f4f4f4","neutralLighterAlt":"#f8f8f8","white":"#ffffff","neutralQuaternaryAlt":"#dadada","neutralQuaternary":"#d0d0d0"},"displayMode":"light","secondaryColors":{"light":[{"themePrimary":"#ffffff","backgroundColor":"#17244C"},{"themePrimary":"#6BC289"},{"themePrimary":"#ffffff","backgroundColor":"#6BC289"},{"themePrimary":"#26A9E1"},{"themePrimary":"#ffffff","backgroundColor":"#26A9E1"},{"themePrimary":"#1B75BC"},{"themePrimary":"#ffffff","backgroundColor":"#1B75BC"},{"themePrimary":"#E7EBF6"},{"themePrimary":"#ffffff","backgroundColor":"#E7EBF6"},{"themePrimary":"#ACBFE3"},{"themePrimary":"#ffffff","backgroundColor":"#ACBFE3"},{"themePrimary":"#B6BBBF"},{"themePrimary":"#ffffff","backgroundColor":"#B6BBBF"}],"dark":[]}}

Size increase of .sppkg packages with heft/v1.22

Jason_Cole — Thu, 18 Dec 2025 21:14:46 GMT

After upgrading our solution to SPFx 1.22.rc-0 and switching to the new heft build toolchain our .sppkg packages have suddenly grown massively in size. They are more than double the size of the 1.21 version. Is there a reason for this? Is there anything we can do to reduce the package size back to what it was previously?

Our main solution contains both web parts and list extensions, split into several bundles. Let me know what other details would be helpful.

Is Creating Multiple ClientContext Instances Efficient in CSOM for one Site Url?

Dinesh_admin — Wed, 17 Dec 2025 09:36:15 GMT

Is it efficient to create a new ClientContext for each site URL and for each query, such as getting site users, lists, groups, and group members from the Web object? These queries can return a very large number of items, and CSOM does not support paging when retrieving data from Web properties. Because of this, there is a risk of memory issues.

In this case, is creating multiple ClientContext objects a good approach? Also, how does ClientContext work internally, and how does it handle memory and performance?

SharePoint Online SP.FieldUserValue.get_email() always returns NULL.

vlad_nvs — Mon, 15 Dec 2025 10:32:16 GMT

Since last week, SP.FieldUserValue.get_email() has been returning null for all users in Person or Group fields.
This occures when I use getItems method. For example:

var listName = "MyList"; var context = SP.ClientContext.get_current(); var web = context.get_web(); var list = web.get_lists().getByTitle(listName); var query= new SP.CamlQuery(); var items = list.getItems(query); context.load(items); context.executeQueryAsync(()=>{ var enumerator = items.getEnumerator(); while (enumerator.moveNext()) { var item = enumerator.get_current(); var fldValues = item.get_fieldValues(); console.log(fldValues["Editor"].get_email()) } });

I haven’t been able to find any information about changes related to this behavior. We’ve been using the Email property of user fields for years without any issues, and it has always worked as expected. It's documented here:
https://learn.microsoft.com/ru-ru/dotnet/api/microsoft.sharepoint.client.fielduservalue.email?view=sharepoint-csom

Does anyone know what might have changed or why this has stopped working?

any possible to extend client ID and secret for app registered in SharePoint Online

FA001062506_techmahindra_caldic — Wed, 12 Nov 2025 14:24:53 GMT

Hi Team,

is there any possible to extend client ID and secret for app registered in SharePoint Online?

right now, we are not allowed to create any new app registration from SharePoint Online, only way is from Azure AD - App registration.

how about the client ID and secret getting expired which is created earlier using SharePoint Online?

is there any way like powershell script something to extend the validity of Client ID and secret for app registered in SharePoint Online?

if yes, please share the detailed instructions and guidelines to perform.

if no, then what is the possible way for next step of actions to do?

you can reachout to me - mailto:email address removed for privacy reasons for further discussion about this issue.

Thanks for the help!

SharePoint Knowledge Agent Vs Power automate AI builder

johnjohn-Peter — Mon, 20 Oct 2025 18:48:40 GMT

If we want to classify, summarize and extract key info from documents uploaded/edited inside a SharePoint document libraries. seems we can do this using AI builder inside power automate which get triggered when add/edit a document or using the Knowledge Agent, mainly the "Organize this library" option.

can any one advice when you use each?

Show Access and Confidentiality Message to External Users in a SharePoint Document Library

Asit00 — Thu, 16 Oct 2025 05:16:59 GMT

Is it possible to display the following text inside a SharePoint document library page so that it’s visible to external users when they open the shared link?

Text to Display:

Access and Use

Access is restricted to authorized representatives and internal personnel.
Users must not share their login credentials or grant access to any third party.
Uploaded and downloaded documents must relate solely to the agreed scope of work

Disclaimer

Use of this site constitutes acceptance of these terms. Access may be suspended or restricted if security, confidentiality, or compliance risks are identified.

Goal:

I want this text to be clearly visible to external parties (for example, when they open a document library link to upload or view files).

Origin and Synchronization of User Profile Properties in SharePoint Online

rosamartinamilazzo25 — Mon, 13 Oct 2025 10:34:28 GMT

Hi everyone,

I’m trying to understand exactly where the User Profile properties in SharePoint Online come from and how (or if) they are synchronized from Microsoft Entra ID (formerly Azure AD).

I’ve extracted a complete list of the properties I see in my tenant, for example:

AboutMe
AccountName
ADGuid
Assistant
CellPhone
Country
DelveFlags
Department
Fax
FirstName
HomePhone
LastName
Manager
msOnline-ObjectId
Office
...
SPS-Responsibility
SPS-Interests
SPS-PictureExchangeSyncState
SPS-UserPrincipalName
WorkEmail
WorkPhone

I would like to understand:

Which of these come from Microsoft Entra ID,
Which are automatically synchronized to the User Profile Application (UPA),
And which are local SharePoint or Delve properties, not connected to Entra.

So far, I’ve only found this official documentation:
About user profile synchronization in SharePoint Online

However, it only lists a limited subset of properties (“The following Microsoft Entra user attributes are synced to the UPA…”), and it does not cover all the properties present in the UPA schema.

I’m looking for a more complete or up-to-date reference — or at least an official explanation as to why there isn’t a public, full mapping between Entra ID and UPA.

Does anyone know if there is an official complete list or a way to verify the actual source of each property (Entra ID, Exchange, Delve, local SharePoint, etc.)?

Thanks in advance for any clarification or useful resources!

Sharepoint SitePage

Girish_venkataramanappa — Fri, 03 Oct 2025 07:34:07 GMT

Using Graph API .

I want to access a specific Sitepage , I need to know the Sitepageid, based on /pages it will return all Page id within the Site,

Is there a way to get the Sitepage id directtly based on the Sitepage name.aspx ?

I want to detect files changes on that Sitepage and be able to downlaod the files from the sitepage ? How can we do that using Graph API

I know we can detect files changed at the drive level within a site. I am looking for Sitepage can we do the same ?what API can be used ?

Repository structure and CI/CD pipeline for SPFx WebParts

rosamartinamilazzo25 — Thu, 18 Sep 2025 12:50:07 GMT

I am currently developing SPFx WebParts for a single SharePoint site. In our development repository, I have:

A shared SPFx library

Six separate WebParts, each in its own solution, organized as follows:

library
webparts
- webpart1
- webpart2
- webpart3 ...

At the moment, on Azure DevOps, everything is managed in a single repository. To build and deploy a WebPart, I check Git for changes, build the WebPart, and then deploy it.

I am considering whether, for the CI/CD pipeline, it might be more efficient to adopt a separate repository for each WebPart, allowing independent pipelines for each solution.

In this scenario, I have two main questions:

Is it considered a best practice to separate WebParts into distinct repositories?
How should the shared SPFx library be managed in this case? I assume it would need a separate repository, but I would like guidance on the best way to integrate it with the WebParts.

Thank you for your support.

Prevent specific user from downloading and syncing documents from specific site/s?

johnjohn-Peter — Sun, 14 Sep 2025 21:43:01 GMT

inside SharePoint online can we prevent specific user from downloading and syncing documents from specific site/s?

Having issues with SPFx isolation build lately

Vijaydeep — Tue, 02 Sep 2025 02:18:08 GMT

Hello

We have a customer using an isolation version of our product and when we built a new version last week, it stopped working with below error. Unfortunately, once we install the new build, replacing with the older ones that used to work stopped working and showing the same error.

"authorize:90 Unsafe attempt to initiate navigation for frame with origin 'https://xxxx.sharepoint.com' from frame with URL 'https://login.microsoftonline.com/..........'. The frame attempting navigation of the top-level window is sandboxed, but the flag of 'allow-top-navigation' or 'allow-top-navigation-by-user-activation' is not set"

We would really appreciate how to handle these errors.

Thanks

Vijay

Error 'Cannot get value for projected field...' when users without email were set to the field

IvanTioh — Thu, 14 Aug 2025 01:36:13 GMT

SharePoint List Setup

I have a simple list with a Person field Approvers which allows multiple selections. One of the list items has a user set to the Approvers but the said user does not have email configured.

REST API used

https://xxx.sharepoint.com/sites/xxx/_api/Web/Lists(guid'xxx')/items/?$filter=ID eq xxx&$select=*,Approvers%2FEMail&$expand=Approvers

REST API response

Error

{ "odata.error": { "code": "-2146232832, Microsoft.SharePoint.SPException", "message": { "lang": "en-US", "value": "Cannot get value for projected field Approvers_x005f_EMail." } } }

Graph API used

https://graph.microsoft.com/v1.0/sites/xxx/lists/xxx/items?$filter=startswith(fields/Title, 'xxx')&$expand=fields($select=Title,Approvers)

Graph API response

Success

"Approvers": [ { "LookupId": 1, "LookupValue": "User A", "Email": "" }, { "LookupId": 2, "LookupValue": "User B", "Email": "" }, { "LookupId": 3, "LookupValue": "User C", "Email": "******@outlook.com" } ]

Question

Is there anyway we can tell the REST API to react the same way as Graph API, instead of failing, return the data as-is?

SharePoint Online Public CDN CSS File Not Updating

jmaranon24 — Thu, 14 Aug 2025 01:19:13 GMT

We updated a CSS file that is loaded on our site via the SharePoint Online Public CDN, but the changes are still not reflecting. It has already been 24 hours since the update.

Steps we’ve tried so far:

Saved the file
Replaced the file
Checked out and checked in
Renamed the file and reverted the name
Cleared browser cache
Performed a hard refresh

Has anyone else experienced this issue? How long does it typically take for changes to appear? I’ve seen some posts mentioning it can take days.

Connection was forcibly closed by TPC RST packet from Microsoft servers

ICOK-Severin — Mon, 04 Aug 2025 08:14:55 GMT

We are experiencing intermittent but frequent connection terminations during communication with SharePoint Online via REST API.
After several internal investigations, we were unable to identify any root cause on our end.
We have observed unexpected connection resets originating from Microsoft servers, specifically during or after the TLS handshake.
Packet trace including the TCP RST.
This packet appears to be an unsolicited TCP RST sent from Microsoft side.

396 19.654862 SharePoint IP Client IP TLSv1.2 357 Application Data 397 19.655259 SharePoint IP Client IP TLSv1.2 1013 Application Data 398 19.655344 Client IP SharePoint IP TCP 1514 443 → Random Port [ACK] Seq=... Ack=... Win=4194560 Len=1460 [TCP PDU reassembled in 402] 399 19.655376 Client IP SharePoint IP TCP 1514 443 → Random Port [ACK] Seq=... Ack=... Win=4194560 Len=1460 [TCP PDU reassembled in 402] 400 19.655387 Client IP SharePoint IP TCP 1514 443 → Random Port [ACK] Seq=... Ack=... Win=4194560 Len=1460 [TCP PDU reassembled in 402] 401 19.655376 Client IP SharePoint IP TCP 1514 443 → Random Port [ACK] Seq=... Ack=... Win=4194560 Len=1460 [TCP PDU reassembled in 402] 402 19.655387 SharePoint IP Client IP TLSv1.2 1448 Application Data 403 19.655476 Client IP SharePoint IP TCP 1514 443 → Random Port [ACK] Seq=... Ack=... Win=4194560 Len=1460 [TCP PDU reassembled in 405] 404 19.655495 Client IP SharePoint IP TCP 1514 443 → Random Port [ACK] Seq=... Ack=... Win=4194560 Len=1460 [TCP PDU reassembled in 405] 405 19.656337 SharePoint IP Client IP TLSv1.2 1212 Application Data 406 19.656367 Client IP SharePoint IP TCP 1514 443 → Random Port [ACK] Seq=... Ack=... Win=4194560 Len=1460 [TCP PDU reassembled in 408] 407 19.656412 Client IP SharePoint IP TCP 1514 443 → Random Port [ACK] Seq=... Ack=... Win=4194560 Len=1460 [TCP PDU reassembled in 408] 408 19.656412 SharePoint IP Client IP TLSv1.2 1070 Application Data 409 19.657129 Client IP SharePoint IP TCP 1514 443 → Random Port [ACK] Seq=... Ack=... Win=4194560 Len=1460 [TCP PDU reassembled in 411] 410 19.657192 Client IP SharePoint IP TCP 1514 443 → Random Port [ACK] Seq=... Ack=... Win=4194560 Len=1460 [TCP PDU reassembled in 411] 411 19.657292 SharePoint IP Client IP TLSv1.2 992 Application Data 412 19.657325 Client IP SharePoint IP TCP 1514 443 → Random Port [ACK] Seq=... Ack=... Win=4194560 Len=1460 [TCP PDU reassembled in 414] 413 19.657435 Client IP SharePoint IP TCP 1514 443 → Random Port [ACK] Seq=... Ack=... Win=4194560 Len=1460 [TCP PDU reassembled in 414] 414 19.657523 SharePoint IP Client IP TLSv1.2 992 Application Data 415 19.659729 SharePoint IP Client IP TCP 60 443 → Random Port [RST] Seq=... Win=0 Len=0 416 19.660127 SharePoint IP Client IP TCP 60 443 → Random Port [RST] Seq=... Win=0 Len=0 417 19.660216 SharePoint IP Client IP TCP 60 443 → Random Port [RST] Seq=... Win=0 Len=0 418 19.660317 SharePoint IP Client IP TCP 60 443 → Random Port [RST] Seq=... Win=0 Len=0 419 19.660318 SharePoint IP Client IP TCP 60 443 → Random Port [RST] Seq=... Win=0 Len=0 420 19.661139 SharePoint IP Client IP TCP 60 443 → Random Port [RST] Seq=... Win=0 Len=0 421 19.661235 SharePoint IP Client IP TCP 60 443 → Random Port [RST] Seq=... Win=0 Len=0 422 19.662135 SharePoint IP Client IP TCP 60 443 → Random Port [RST] Seq=... Win=0 Len=0 423 19.662212 SharePoint IP Client IP TCP 60 443 → Random Port [RST] Seq=... Win=0 Len=0 424 19.665417 Client IP SharePoint IP TCP 1514 443 → Random Port [ACK] Seq=... Ack=... Win=4194560 Len=1460 425 19.766395 Client IP SharePoint IP TCP 1514 [TCP Retransmission] 443 → Random Port [ACK] Seq=... Ack=... Win=4194560 Len=1460 426 20.367148 Client IP SharePoint IP TCP 1514 [TCP Retransmission] 443 → Random Port [ACK] Seq=... Ack=... Win=4194560 Len=1460 427 21.167413 Client IP SharePoint IP TCP 1514 [TCP Retransmission] 443 → Random Port [ACK] Seq=... Ack=... Win=4194560 Len=1460 428 21.179165 Client IP SharePoint IP TCP 1514 [TCP Spurious Retransmission] 443 → Random Port [ACK] Seq=... Ack=... Win=4194560 Len=1460 429 21.773431 Client IP SharePoint IP TCP 1514 443 [SYN, ECE, CWR] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM

TLS Handshake Behavior:
.NET-based applications on our server report the following exception:
System.IO.IOException: Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host. ---] System.Net.Sockets.SocketException (10054): An existing connection was forcibly closed by the remote host.

We have included packet traces showing:
- Successful TCP and TLS handshakes
- Encrypted application data sent by our client
- Acknowledge packets from your server
- Connection then abruptly closed by a TCP RST without any visible application-layer error

Environment & Testing:
- Operating System: Windows Server 2022
- Frameworks: .NET 6 / .NET 8
- Connectivity: REST API calls to SharePoint Online (no sync, no OneDrive, no hybrid setup), TLS1.2 used and set up based on Microsoft recommendations

Observations:
- Approximately 70% of API calls fail intermittently
- Issue occurs across multiple SharePoint sites and folders
- Affects all users (admin, regular users, etc.).
- No firewall, hardware, or configuration changes have occurred on the affected server
- Disabling security software had no impact
- Temporary switch to IPv6 improved stability for ~24 hours before the issue returned
- New development:
- We moved some applications to a separate VPS — those are working correctly.
- However, a similar issue has now started occurring on a completely different server hosted by a customer,
indicating this may not be isolated to a single environment or IP.

Is this expected behavior under specific policies (e.g., IP reputation, rate limiting, User-Agent filtering)?
Could there be a misconfiguration or conditional access policy silently blocking some connections?
Is this possibly related to throttling or regional backend issues?

Thank you for any support in this case.

SPFX 1.21.1 in monorepo - utility module could not be exported

Kiril Iliev — Tue, 29 Jul 2025 13:33:18 GMT

I am trying to migrate multiple projects to monorepo. I need to migrate some common utilities functions in a common module.

There is an export warning that the module has no exports, while it does has.

Running npm run spfx1:build works fine. But when I do npm run spfx1:serve it throws a warning

export 'DemoUtilities' (imported as 'DemoUtilities') was not found in 'utilities-library/utils' (module has no exports)

Opening the a SharePoint page online, it errors with missing exports.

Can you point me to possible solutions?

Here is a very simple OOB SPFX solution structure:

utilities-library

- src

-- utils.ts

- index.ts

- package.json

- tsconfig.json

spfx1

- config

- sharepoint

- src

-- skipped for brevity

- gulpfile.js

- package.json

- tsconfig.json

package.json

tsconfig.base.json

Specifics for per files

utilities-library -> package.json

{ "name": "utilities-library", "version": "1.0.0", "main": "lib/index.js", "types": "lib/index.d.ts", "scripts": { "start": "node index.js", "test": "echo \"test\"" }, "type": "module", "workspaces": [ "true" ], "devDependencies": { "typescript": "^5.3.5" } }

utilities-library ->tsconfig.json

{ "compilerOptions": { "composite": true, "declaration": true, "outDir": "lib" }, "include": ["**/*.ts"] }

utilities-library ->index.ts

export { DemoUtilites } from './src/utils';

utilities-library -> utils.ts

import { ISPFXContext, spfi, SPFx } from "@pnp/sp"; import "@pnp/sp/webs"; import "@pnp/sp/lists"; export const DemoUtilites = { checkListExists: async ( listTitle: string, context: ISPFXContext ): Promise<boolean> => { const sp = spfi().using(SPFx(context)); return new Promise<boolean>((resolve) => { sp.web.lists .getByTitle(listTitle)() .then(() => { resolve(true); }) .catch((error) => { if (!(error?.status === 404)) { console.log(`Error checking list ${listTitle}`, error); } resolve(false); }); }); } }

spfx1 -> gulpfile.js

'use strict'; const build = require('@microsoft/sp-build-web'); const path = require("path"); build.addSuppression(`Warning - [sass] The local CSS class 'ms-Grid' is not camelCase and will not be type-safe.`); build.configureWebpack.mergeConfig({ additionalConfiguration: (generatedConfig) => { generatedConfig.resolve = generatedConfig.resolve || {}; generatedConfig.resolve.alias = { ...(generatedConfig.resolve.alias || {}), 'utilities-library': path.resolve(__dirname, '../utilities-library/lib'), 'utilities-library/utils': path.resolve(__dirname, '../utilities-library/lib/utils') }; return generatedConfig; } }); var getTasks = build.rig.getTasks; build.rig.getTasks = function () { var result = getTasks.call(build.rig); result.set('serve', result.get('serve-deprecated')); return result; }; build.initialize(require('gulp'));

spfx1 -> package.json

{ ... "dependencies": { "@microsoft/decorators": "1.21.1", "@microsoft/sp-core-library": "1.21.1", "@microsoft/sp-dialog": "1.21.1", "@microsoft/sp-listview-extensibility": "1.21.1", "@pnp/sp": "^4.12.0", "utilities-library": "^1.0.0", "office-ui-fabric-react": "^7.204.1", "react": "17.0.1", "react-dom": "17.0.1", "tslib": "2.3.1" }, ... }

spfx1 -> tsconfig.json

{ "extends": "../tsconfig.base.json", "compilerOptions": { "rootDir": "src", "outDir": "lib" }, "include": ["src/**/*.ts", "src/**/*.tsx"], "references": [ { "path": "../utilities-library" } ] }

root -> package.json

{ "name": "monorepo-test", "workspaces": [ "spfx1", "utilities-library" ], "scripts": { "spfx1:build": "gulp build -f ./spfx1/gulpfile.js --workspace spfx1", "spfx1:clean": "gulp clean -f ./spfx1/gulpfile.js --workspace spfx1", "spfx1:serve": "gulp serve -f ./spfx1/gulpfile.js --workspace spfx1 --nobrowser", "spfx1:bundle": "gulp bundle -f ./spfx1/gulpfile.js --workspace spfx1", "spfx1:pkg": "gulp package-solution -f ./spfx1/gulpfile.js --workspace spfx1", "spfx1:prod": "gulp build -f ./spfx1/gulpfile.js --workspace spfx1 --ship & gulp bundle -f ./spfx1/gulpfile.js --workspace spfx1 --ship & gulp package-solution -f ./spfx1/gulpfile.js --workspace spfx1 --ship", "utilities-library:build": "tsc --project utilities-library/tsconfig.json", "utilities-library:watch": "npm run utilities-library:build -- --watch", "clean:node": "rm -rf **/node_modules" }, "devDependencies": { "npm-run-all": "^4.1.5" } }

root -> tsconfig.base.json

{ "extends": "./node_modules/@microsoft/rush-stack-compiler-5.3/includes/tsconfig-web.json", "compilerOptions": { "target": "es5", "forceConsistentCasingInFileNames": true, "module": "esnext", "moduleResolution": "node", "jsx": "react", "declaration": true, "sourceMap": true, "experimentalDecorators": true, "skipLibCheck": true, "outDir": "lib", "inlineSources": false, "noImplicitAny": true, "rootDir": ".", "baseUrl": ".", // Important for path mapping "paths": { "utilities-library/*": [ "utilities-library/lib/*" ] }, "typeRoots": [ "./node_modules/@types", "./node_modules/@microsoft" ], "types": [ "webpack-env" ], "lib": [ "es5", "dom", "es2015.collection", "es2015.promise" ] }, "include": [ "src/**/*.ts", "src/**/*.tsx" ] }

SPFX call gets error "interaction required" after turning on function's System Assigned Identity

WFC — Tue, 15 Jul 2025 14:08:40 GMT

I have an spfx web part that is connected an Azure Function. All was working until I turned on the System Assigned Identity for the function. Below is my configuration while it was working:

Function app: contoso-fn

App Service authentication enabled
Unauthenticated requests get a 302 HTTP code
Microsoft is the identity provider, with app registration "contoso-fn-auth"
It allows token audiences from api://<id-contoso-fn-auth> and from <my-tenant>.sharepoint.com
Allowed client applications include 08e18876-6177-487e-b8b5-cf950c1e598c and <id-contoso-fn-auth>
CORS: https://portal.azure.com and https://<my-tenant>.sharepoint.com

App registration "contoso-fn-auth" (used above when setting up identity provider)

Authentication > Web > Redirect URI: https://contoso-fn-xxxxx.azurewebsite.net/.auth/login/aad/callback
ID tokens issued
only accounts in the tenant can access this API
API permissions > contoso-fn-auth > user_impersonation ; Delegated; Status: granted for tenant
Expose an API: Scopes api://<id-contoso-fn-auth>/user_impersonation

The code in the SPFX to request the function is something like this:

this.context.aadHttpClientFactory .getClient('<id-contoso-fn-auth') .then((client: AadHttpClient): void => { client.get(<url-to-the-fn>/api/upload)...});

In the SharePoint Admin Center, under Advanced > API Access, the user_impersonation permission is approved for contoso-fn.

I then changed the Function app identity, turning on "system assigned", as I needed the function to authenticate against the Azure Blob Client, and now I'm getting the following error:

interaction_required: Seamless single sign on failed for the user. This can happen if the user is unable to access on premises AD or intranet zone is not configured correctly

I read something about turning on the function's system assigned identity affecting how I requests tokens using the aadHttpClientFactory, but I haven't been too successful in finding how to solve the issue (including internet search and asking several LLMs).

I don't need my function to have user context (I could send that from the spfx) but I need this to work without any redirects. I would appreciate help to be able to call the function from the spfx seamlessly, while keeping the function secured with Microsoft identity.

(porting from a different forum, as requested)