Add TSG to connector-troubleshoot-sharepoint-online-list.md

Author: Clare-Zheng82

articles/data-factory/connector-troubleshoot-sharepoint-online-list.md

@@ -6,7 +6,7 @@ author: jianleishen
 ms.service: data-factory
 ms.subservice: data-movement
 ms.topic: troubleshooting
-ms.date: 10/01/2021
+ms.date: 01/25/2022
 ms.author: jianleishen
 ms.custom: has-adal-ref, synapse
 ---
@@ -25,6 +25,39 @@ This article provides suggestions to troubleshoot common problems with the Share
 
 - **Recommendation**:  Check your registered application (service principal ID) and key to see whether they're set correctly.
 
+## Connection fail after granting permission in SharePoint Online List 
+
+### Symptoms 
+
+You granted permission to your data factory in SharePoint Online List, but you still fail with the following error message:
+
+`Failed to get metadata of odata service, please check if service url and credential is correct and your application has permission to the resource. Expected status code: 200, actual status code: Unauthorized, response is : {"error":"invalid_request","error_description":"Token type is not allowed."}.`
+
+### Cause 
+
+The SharePoint Online List uses ACS to acquire the access token to grant access to other applications. But for the tenant built after November 7, 2018, ACS is disabled by default. 
+
+### Recommendation
+
+You need to enable ACS to acquire the access token. Take the following steps:  
+
+1. Download [SharePoint Online Management Shell](https://www.microsoft.com/download/details.aspx?id=35588#:~:text=The%20SharePoint%20Online%20Management%20Shell%20has%20a%20new,and%20saving%20the%20file%20to%20your%20hard%20disk.), and ensure that you have a tenant admin account. 
+1. Run the following command in the SharePoint Online Management Shell. Replace `<tenant name>` with your tenant name and add `-admin` after it.  
+
+   ```powershell
+   Connect-SPOService -Url https://<tenant name>-admin.sharepoint.com/ 
+   ```
+1. Enter your tenant admin information in the pop-up authentication window. 
+1. Run the following command:
+
+   ```powershell
+   Set-SPOTenant -DisableCustomAppAuthentication $false 
+   ```
+    :::image type="content" source="./media/connector-troubleshoot-guide/sharepoint-online-management-shell-command.png" alt-text="Diagram of Azure Data Lake Storage Gen1 connections for troubleshooting issues.":::
+
+1. Use ACS to get the access token. 
+
+
 ## Next steps
 
 For more troubleshooting help, try these resources: