Register the Azure App for OneDrive for Business with Azure AD

You must register the Azure app with Azure Active Directory (AD).

Important

You can perform the registration manually, as described in this topic, or you can use the custom configuration toolkit, which is available in the custom configuration option and which automates the registration process.

To improve performance and to minimize throttling, you can register a maximum of 5 Azure apps.

Note

Disclaimer: This procedure is performed using the Azure Active Directory web application. The Azure AD application is subject to change without notice. Consult Microsoft documentation, such as Azure Active Directory Documentation.

Procedure

  1. Register the Azure app for OneDrive for Business in the Azure portal.

  2. Request and grant permissions for Azure APIs for the Azure app.

  3. Create a client secret for the Azure app.

Log On to the Azure Portal as the Global Administrator

  1. Log on to the Azure portal (https://portal.azure.com/) using your global administrator account.

  2. Go to Azure Active Directory.

Register the Azure App

  1. In the navigation pane, click App registrations.

    The App registrations page appears.

  2. Click New registration.

    The Register an application screen appears.

  3. In the Name box, type a name for the app.

  4. Under Supported account types, select Accounts in this organizational directory only (tenant_prefix - Single tenant).

  5. To verify the status of the app and to authorize the app from the Command Center, under Redirect URI, enter the Command Center URL.

    For example, enter https://Command_Center_name.domainname.com/commandcenter.

  6. Click Register.

  7. Copy and paste the following values in a file or other document that you can access later:

    • Application ID

    • Directory ID

    You will enter these values in the Command Center when you create the OneDrive for Business app.

Request and Grant Permissions for Azure APIs

  1. In the navigation pane, click API permissions.

  2. Click Add a permission.

    The Request API permissions pane appears.

  3. Click Microsoft Graph tile.

  4. Click Application permissions.

  5. Select the following permissions:

    • Directory: Directory.Read.All

    • Files: Files.ReadWrite.All

    • User: User.Read.All

    • Notes: Notes.ReadWrite.All

    • Application: Application.ReadWrite.All

  6. Click Add permissions.

  7. Click Add a permission.

    The Request API permissions pane appears.

  8. Click Grant admin consent for tenant_name.

  9. Click Yes.

Create a Client Secret

  1. In the navigation pane, click Certificates & secrets.

  2. Click New client secret.

  3. Enter a description, and then select when you want the secret to expire.

  4. Click Add.

  5. Copy and paste the client secret value in a file or other document that you can access later.

    You will enter this value in the Command Center when you create the OneDrive for Business app.

Loading...