Step-by-step configuration of OAuth2/OneDrive App in Azure

The high-security Oauth2 protocol provides state-of-the-art access-control to OneDrive and ensures that only the logged in user is able to upload documents to it’s designated area.

You first need to create and register an Azure Authentication application that will be used by Celiveo 365 Scan to authenticate against Entra ID identity platforms and then upload documents to OneDrive using the printer authenticated users Token.

Subscription Requirements

1. Microsoft Entra ID Account is required to access the customer tenant and Register the Application.
2. The used Microsoft Entra ID Account requires the following roles:
   1. Privileged Role Administrator Role
   2. App development admin
   3. Cloud application administrator

Application Registration

1. Sign in to the Azure portal and search “App registrations”
   
2. Click “New registration” in “App registrations” as shown below
   
3. Enter a name “Celiveo 365 Scan – OneDrive” for application and select “Accounts in this organizational directory only (Customer Tenant only- Single tenant)” and Save.
   
4. Under Manage > Authentication, select the supported Account Type “Accounts in this organizational director,’ only (Customer Tenant only – Single tenant)”. in Advanced settings set Enable the following mobile and desktop flow to Yes and Save.
   
5. Under Manage > API permissions, press “Add a permission”.
   
6. Under Microsoft APIs select “Microsoft Graph”.
   
7. Select “Delegated permissions”, under the Select permissions search type “Files.ReadWrite” or select it under Files > * Files.ReadWrite* and press Add Permissions. Note: This only allows the app to read. create. update and delete the signed-in user’s files.
   
8. Under Overview copy the Application (Client) ID and Directory (tenant) ID data for application configuration in Web Admin. Process described here.