Create an Application to Represent the Connector
The OneDrive Connector retrieves information through the Microsoft Graph API.
To use the Microsoft Graph API, you must go to the Azure portal and register an application to represent the connector. Full instructions about how to create an application are available in the Microsoft documentation.
The OneDrive Connector has the following requirements:
- Register an application > Supported account types. Create a "Multitenant" application that can be used by accounts in any organizational directory.
- Register an application > Redirect URI. Configure the redirect URI to match the value that you use with the OAuth configuration tool (by default,
http://localhost:7878/oauth
). The "type" of the redirect URI should be "Web". - Client ID and Secret. After you register the application, make a note of the Application (client) ID. Then, go to the Certificates & secrets page and generate a client secret. You will need these to configure OAuth authentication.
-
API Permissions. The connector requires the following permissions for the Microsoft Graph API. Grant delegated permissions if you are retrieving data from a single user. Grant application permissions to retrieve data from multiple users in a OneDrive for Business environment.
Permissions Notes Files.Read.All
User.Read
These permissions must be granted. Files.ReadWrite.All
Required to use the insert
ordelete
actions to insert files into OneDrive or delete files in OneDrive.Directory.Read.All
Group.Read.All
User.ReadBasic.All
(OneDrive for Business only). Required if you want to configure Mapped Security, to protect information that you index into IDOL from unauthorized access.