miniOrange Embed Files for SharePoint/OneDrive vs Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

miniOrange SharePoint WordPress plugin provides complete SharePoint/OneDrive integration for WordPress. Easily embed documents, folders, and entire libraries directly into WordPress pages or posts. Additionally, sync files from SharePoint or OneDrive to the WordPress media library for reuse across your site. The plugin supports both SharePoint Online and SharePoint On-Premise environments, OneDrive for Business, and OneDrive Personal accounts. With secure OAuth 2.0 authentication, dynamic access control, and compatibility with major WordPress forms, membership, and eCommerce plugins, this solution is perfect for business, education, and enterprise environments. With the new SharePoint Copilot integration, you can also add AI-powered SharePoint search to WordPress, letting users find and analyze documents using natural language. Your privacy matters. This plugin is fully self-contained and does not use or rely on any miniOrange servers or services. No data is routed through miniOrange. 🔗 Live Demo & More Info: Microsoft SharePoint OneDrive Integration 📺 Watch How It Works: Highlights Embed SharePoint/OneDrive folders & files directly into WordPress Advanced access controls & role-based permissions Form submission sync to SharePoint lists Works with both Online and On-Premise SharePoint Gutenberg block and shortcode support External Services This plugin connects to Microsoft SharePoint and OneDrive APIs via Microsoft Graph to enable document synchronization, preview, and embedding directly within WordPress. The plugin uses Microsoft Graph API for the following purposes: – Authenticating with SharePoint and OneDrive accounts (via OAuth 2.0). – Fetching documents and folders from SharePoint/OneDrive libraries. – Generating secure preview links and download URLs. – Managing access tokens locally to maintain integration. What Data Is Sent and When During authentication (one-time setup by the site admin): The plugin sends the Client ID, Client Secret (if applicable), and Redirect URI to Microsoft Servers. These are values configured by the site owner in the Azure portal. The authorization code is exchanged for an access token, which is stored locally. When users browse or embed SharePoint/OneDrive content: The plugin sends requests to Microsoft Graph for metadata (e.g., document/folder names, paths, IDs) to generate preview/download links. No user credentials, personal information, or business data is collected, transmitted, or stored by miniOrange at any point. All communication occurs directly between your WordPress site and Microsoft Graph API servers. Service Provider All external communication is limited strictly to Microsoft Graph API, provided by Microsoft Corporation. Microsoft Graph API Terms of Use Microsoft Privacy Policy Use of this plugin implies consent to connect to Microsoft Graph for integration purposes in accordance with Microsoft’s terms and privacy policy. Features Embed SharePoint/OneDrive Documents – Display PDFs, Word docs, Excel sheets, videos, and images from SharePoint/OneDrive. – Sync documents into the WordPress media library for use with ACF or page builders. – Use shortcodes to embed any document anywhere on your site. Powerful Shortcode Generator – Generate secure shortcodes for public or restricted views. – Set individual permissions for different WordPress users and roles. – Allow preview, download and upload access for the embedded folders and documents. – Select from Grid, List or Table View for the embedded files. – Embed images, videos in gallery view. AI Assistant & SharePoint Copilot (MCP) for WordPress – Add AI-powered, natural-language search to your SharePoint and OneDrive content — just describe what you need and the AI Assistant finds and reads the exact file. – “Ask your PDF” chat, semantic AI search, and instant AI summaries for PDF, Word, Excel, and PowerPoint documents, with every answer citing its source. – Built on the WordPress Abilities API with granular, admin-controlled SharePoint AI abilities — document search, list sites, list document libraries, browse folders, view file details, read document text, and get current user. – Bring your own AI provider: use the WordPress AI Client / Connectors (OpenAI, Google Gemini, Anthropic Claude) or a plugin-level API key. – Microsoft Copilot / MCP (Model Context Protocol) connector lets external AI assistants and AI clients securely query your Microsoft 365 and SharePoint data using natural language. – Also integrates with external AI clients like Cursor, Claude, and ChatGPT through the MCP connector. – Permission-aware and private: answers respect each user’s Microsoft 365 / SharePoint access, secured with OAuth 2.0 PKCE and Microsoft Graph — credentials are never shared and no data is routed through miniOrange. – Learn more: SharePoint Copilot for WordPress – Learn more: AI Assistant for WordPress Guided Setup & Onboarding – Step-by-step setup wizard for faster, easier SharePoint/OneDrive plugin configuration. – Interactive guided tour of key plugin sections and settings. – Contextual, in-plugin guidance that reduces onboarding time for new users. – Improved user experience — getting started is now easier than ever, from first install through everyday configuration. Access Control & Permissions – Restrict access based on user roles, email domain, WooCommerce plans, or membership level. – Secure embedded files using dynamic URL to prevent direct file URL access from WordPress. Automated Sync & Form Integration – Sync Gravity Forms, Contact Form 7, or Fluent Forms submissions to SharePoint lists or folders. – Automatically convert form data into PDF and store in SharePoint. – Create WordPress posts/pages based on SharePoint data updates. User Profile & Metadata Sync – Sync SharePoint user attributes like “About Me,” “Skills,” etc. – Create new WordPress users from SharePoint list entries. – Keep profiles updated in both platforms. Advanced File Management – Upload, edit, delete, and preview SharePoint/onedrive files from WordPress without storing them locally. – Use the WordPress dashboard to manage SharePoint/OneDrive directories. Enhanced Search & Views – Search SharePoint files using metadata or full-text. – Display libraries in list, grid, or table view. – Provide document preview in popup or new tab. Notification & Alert System – Notify users of file uploads, updates, or new assignments. – Send automatic alerts to SharePoint users or WooCommerce customers. Supported Applications – SharePoint Online & OnPremise – OneDrive Enterprise & Personal Shortcode Embedding – Embed SharePoint Site as Shortcode – SharePoint Drive as Shortcode – File/Folders as Shortcode – Individual Document (PDF / DOC / PPT / Excel / PPT / Video ) in Preview or Edit Mode File/Folder Action – Preview in SharePoint / OneDrive – Popup Display – Download / Upload / Search Look & Feel – List / Grid / Lightbox / View – Sorting based on Standard SharePoint Columns – Filters for file types, custom column values and date-time. WP Posts Synchronization – Sync SharePoint/onedrive files to WordPress media library as an attachment. – Sync to WordPress Custom Post Types ( WP CPT Sync ). – Maintain SharePoint/OneDrive folder structure using WordPress Taxonomies and Terms. – Assign WordPress tags to the files and folders. SharePoint Artifacts – Sync Custom Columns, News, Articles, Events & Lists. 3rd Party Integrations – ACF ( Advanced Custom Fields ) – Gravity Forms – Formiddable Form – Contact Form 7 – WooCommerce Top Use Cases Display SharePoint & OneDrive Content in Real Time Use shortcodes to embed SharePoint folders, document libraries, and OneDrive directly inside any WordPress page or post. Changes in Microsoft 365 appear on your site instantly — no re-uploading needed. – Browse folders and libraries inline. – Preview documents without leaving the page. – Download or upload files from allowed locations. Show and Restrict the Right Files for Every User Control who can view, download, or upload SharePoint and OneDrive content. When users sign in with Azure AD SSO, their Microsoft 365 permissions automatically carry over, so each person only sees what they are already allowed to access. – Restrict access by WordPress roles, specific email addresses, or login state. – Control view, preview, download, and upload permissions separately. – File visibility automatically mirrors Microsoft 365 permissions after Azure AD SSO login. – No duplicate configuration needed between WordPress and Microsoft 365. Connect Multiple Microsoft 365 Sources from One Dashboard Organizations often store files across multiple Microsoft platforms. Connect SharePoint sites, OneDrive for Business accounts, and personal OneDrive accounts all from a single plugin dashboard. – Manage all Microsoft 365 file sources from one place. – Embed content from any connected source using shortcodes. – Keep departmental and personal storage logically separated. Sync Microsoft 365 Files into the WordPress Media Library Instead of embedding shortcodes for every folder, sync Microsoft 365 files directly into the WordPress Media Library. Editors can then use them naturally inside pages, posts, and page builders, just like any regular WordPress media. – Files appear in the native Media Library without any shortcodes. – Editors work with a familiar WordPress interface. – Compatible with Gutenberg, Elementor, and other page builders. Turn SharePoint Documents into Dynamic WordPress Content Automatically sync SharePoint and OneDrive file metadata like titles, descriptions, categories, and custom fields into WordPress Custom Post Types. Build dynamic content pages powered directly by your Microsoft 365 data. – File metadata maps to Custom Post Type fields automatically. – Build searchable document portals from SharePoint data. – Content stays current as files change in Microsoft 365. Support & More 📧 Email: [email protected] 📞 Book a call: Contact Form 🌐 Explore more plugins: miniOrange WordPress Plugins

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!