Connect SharePoint Online to On-Premises Oracle and SQL Server Databases
Question details
An organization needs to migrate SharePoint 2010 custom web parts to SharePoint Online while retaining access to on-premises Oracle and SQL Server data.
- Product
- Microsoft SharePoint Online, SharePoint 2010, Oracle Database, and Microsoft SQL Server
- Device & OS
- not provided
- Scenario
- Replace legacy SharePoint web parts with a supported cloud integration that securely retrieves data from existing on-premises databases.
- Observed behavior
- The required outcome is for SharePoint Online users to access authorized Oracle and SQL Server data without exposing the databases directly to the internet.
Inventory each web part’s queries, authentication method, and read/write requirements, then confirm database versions and network connectivity. Check Azure and Power Apps licensing, connector support, and organizational security policies before selecting an architecture.
Use an Azure App Service API with hybrid connections
Use this architecture when custom SharePoint components need controlled access to Oracle and SQL Server through a backend API.
SharePoint Online does not run SharePoint 2010 farm solutions or their server-side database code. Rebuild the interface, typically with SharePoint Framework (SPFx), and move database operations into a secured backend API.
Azure App Service Hybrid Connections provides network connectivity to configured on-premises TCP endpoints. It does not provide database drivers, query logic, or user authorization; your API must implement those components.
Review the existing web part code and define API operations for the required queries or updates. Use least-privilege database accounts, parameterized queries, and server-side authorization rather than accepting arbitrary SQL from the browser.
In the Azure portal, create an App Service web app using a plan and operating system that support Hybrid Connections. Deploy an API with compatible Oracle and SQL Server drivers, and configure secrets through protected app settings or Azure Key Vault.
Open the App Service resource in the Azure portal and select Networking > Hybrid connections. Add a connection for each required database hostname and TCP port. Install Hybrid Connection Manager on a supported on-premises host that can reach those endpoints, and register the connections.
Configure Microsoft Entra ID authentication for the API. In the SPFx project, declare the necessary API permission requests and use AadHttpClient to call the secured API. Have an administrator approve the requests in the SharePoint admin center under Advanced > API access.
Deploy the SPFx package to the SharePoint app catalog, add the web part to a test page, and verify authorized queries, denied access, latency, and connection failures. Review the architecture with your Azure and SharePoint development teams before production rollout.
Use Power Apps with an on-premises data gateway
Use this option when a form or low-code application can replace the custom web part and supported connectors cover the required database operations.
Use WPS Office to Work with Exported Database Reports
WPS Office does not migrate SharePoint web parts or establish these database connections. For reviewing exported reports and maintaining migration documentation, it offers a free, lightweight alternative with a familiar interface and Microsoft Office format compatibility, making it easy to move existing files into WPS.
Frequently Asked Questions
Can I move a SharePoint 2010 web part to SharePoint Online without rewriting it?
Not if it depends on farm deployment, server-side SharePoint code, or direct database connections. Rebuild the interface with SPFx or Power Apps, and move database access into a backend API or a supported connector.
Should I use Business Connectivity Services for a new SharePoint Online integration?
No. Business Connectivity Services (BCS) in SharePoint Online was retired on September 30, 2024. Evaluate a secured API or Power Apps with supported connectors instead of designing a new solution around BCS.
Do Azure Hybrid Connections require opening inbound database ports to the internet?
The Hybrid Connection Manager establishes outbound connectivity to Azure Relay, so you do not need to expose the database port publicly for this architecture. The manager still needs network access to the database endpoint and the required outbound Azure Relay connectivity.
When is Power Apps a better choice than an SPFx web part?
Choose Power Apps when supported connectors can handle the required forms, queries, and updates with acceptable delegation and performance limits. Choose SPFx with a backend API when you need a highly customized interface, complex database logic, or tighter control over the API contract.
Can an existing WCF service be reused?
Possibly, if its hosting, authentication, and network exposure meet current security requirements. SharePoint Online cannot host the on-premises service, and browser clients may need an API adapter rather than calling WCF directly. Review the service bindings and authentication model with your development team before choosing this approach.
