Register Microsoft OneDrive as an OAuth provider for Document Services

Use the information generated during Microsoft OneDrive account configuration to register Microsoft OneDrive as an OAuth provider and allow the instance to request OAuth 2.0 tokens.

Before you begin

Role required: admin

Procedure

1. Navigate to All > System OAuth > Application Registry.
2. Select New.
3. On the screen titled What kind of OAuth application, select Connect to a third-party OAuth Provider.
4. On the form, fill in the fields.

   Table 1. Application Registries form

   Field	Value required
   Name	Name to uniquely identify the record.
   Client ID	Application ID of the OneDrive application you created in Microsoft Azure.
   Client Secret	The Client Secret you generated when you created the application in Microsoft Azure.
   Default Grant type	This value should be Authorization Code.
   Authorization URL	https://login.microsoftonline.com/common/oauth2/v2.0/authorize Note that you have to unlock this field and then lock it again.
   Token URL	https://login.microsoftonline.com/common/oauth2/v2.0/token Note that you have to unlock this field and then lock it again.
   Redirect URL	https://<instance>.service-now.com/oauth_redirect.do Note that you have to unlock this field and then lock it again.

5. Right-click in the form header and select Save.
   An OAuth Entity Profile record is created.
6. In the OAuth Entity Scopes related list, add scopes to match the permissions you defined when you configured the Microsoft OneDrive application.
   1. Select Insert a new row.
   2. Enter the name and the OAuth scope of the permission, which for these Document Services scopes are the same for both values.
      • Files.Read
      • Files.Read.All
      • offline_access
      • Files.ReadWrite
      • Files.ReadWrite.All
7. Right-click in the form header and select Save.
8. Select Update.

Result

The system validates the OAuth credentials.