---
sourceDocument: Australia Workflow Data Fabric
sourceDocumentLink: https://www.servicenow.com/docs/r/integrate-applications

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Workflow Data Fabric

ft:clusterId :

    - crint

bundleId :

    - crint

workflow :

    - Creator


---

# Set up Microsoft OneDrive spoke

# Set up Microsoft OneDrive spoke {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 4 minutes to read

Integrate the ServiceNow instance and Microsoft OneDrive spoke by using OAuth 2.0 credentials to authenticate ServiceNow requests.

## Before you begin

* Request an Integration Hub subscription.
* Activate the Microsoft OneDrive spoke.
* Role required: admin.
{#setup-msonedrive__ul_ts2_k3h_vhb}

## Configure Microsoft OneDrive application {#ariaid-title2}

Create a custom OAuth application from your Microsoft OneDrive account to enable OAuth 2.0 authentication with the Microsoft OneDrive spoke.

### Before you begin

Microsoft OneDrive requirements:

* Microsoft OneDrive account
* [Microsoft Azure](https://portal.azure.com) account
* Role required: Microsoft OneDrive tenant administrator credentials
{#configure-onedrive-application__ul_nhk_cnh_gfb}

### About this task

Complete these steps from your Azure Developer account. See the [Azure](https://docs.microsoft.com/en-us/azure/) product documentation for instructions on creating and configuring custom applications.

### Procedure

1. Log in to the [Microsoft Azure App registration
   portal](https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationsListBlade) with your organization credentials.
2. Register a new custom application.  
   Fill in the application name, the supported account type, and the redirect URI, and then click Register.  
   An overview of the application's basic information is shown.  
   Note:  
   Ensure that you enter the redirect URI in this format: <kbd class="ph userinput">https://&lt;instance&gt;.service-now.com/oauth_redirect.do</kbd>.
3. Copy the application ID to a text file.  
   You will use this ID and the client secret generated in the next step to register the app as a third-party OAuth provider on your ServiceNow instance. You use the application ID as the client ID when you connect the application to ServiceNow.
4. Add a client secret.
   1. In Microsoft Azure, navigate to ManageCertificates \& secrets.
   2. Provide a description and an expiration date and click Add.  
      Note:  
      The client secret is only displayed in plain text for a short time. You use the client secret when you connect the application to ServiceNow.
   {#configure-onedrive-application__substeps_dzd_nct_whb}
5. Enable the permissions you want the application to support.  
   For more information, see the [Microsoft Graph permissions reference](https://docs.microsoft.com/en-us/graph/permissions-reference).
   1. In Microsoft Azure, navigate to ManageAPI permissions.
   2. Click the Microsoft Graph tile.
   3. Select the Delegated or Application permissions that the application supports.  
      Delegated permissions enable the application to access the API as a signed-in user. Application permissions enable the application to run as a background service or daemon without a signed-in user. You must mention these API permissions in the OAuth Entity scopes tab while configuring the [application registry](https://www.servicenow.com/docs/TiWP7jqOGioyIDWto394tg#register-onedrive-oauth "Use the information generated during Microsoft OneDrive account configuration to register Microsoft OneDrive as an OAuth provider and allow the instance to request OAuth 2.0 tokens.").  
      Note:  
      You must ensure that these API permissions are provided for your custom app.{#configure-onedrive-application__table_mfg_t1y_cnb__entry__2}

      | Name | OAuth scope |
      |-|-|
      | Calendars.ReadWrite | Calendars.ReadWrite |
      | Calendars.ReadWrite.Shared | Calendars.ReadWrite.Shared |
      | email | email |
      | Files.Read | Files.Read |
      | Files.Read.All | Files.Read.All |
      | offline_access | offline_access |
      [ ]

      {#configure-onedrive-application__table_mfg_t1y_cnb}
   4. Click Add permissions.
   {#configure-onedrive-application__substeps_ddd_zft_whb}
{#configure-onedrive-application__steps_tdj_yxk_rhb}

## Register Microsoft OneDrive as OAuth provider {#ariaid-title3}

Use the information generated during Microsoft OneDrive account configuration to register Microsoft OneDrive as an OAuth provider and allow the instance to request OAuth 2.0 tokens.

### Before you begin

* Request Integration Hub subscription.
* Activate Microsoft OneDrive spoke.
* Create Microsoft OneDrive application.
* If you are using a single tenant app registration, obtain the value of Directory (tenant) ID from the Azure portal.

  <br />

{#register-onedrive-oauth__ul_k2k_mph_gfa}Role required: admin

### Procedure

1. In ServiceNow, navigate to System OAuthApplication Registry.
2. Click New.
3. On the screen titled What kind of OAuth application, select Connect to a third-party OAuth Provider.
4. Enter these values in the Application Registries form:  
   {#register-onedrive-oauth__table_alw_kq3_gfb__entry__2}

   | Field | Value required |
   |-|-|
   | Name | Enter any name to uniquely identify the record, for example <kbd class="ph userinput">OneDrive OAuth profile</kbd>. |
   | Client ID | Enter the Application ID of the OneDrive application you created in Azure. |
   | Client Secret | Enter the Client Secret you generated when you created the application in Azure. |
   | Default Grant type | Select Authorization Code. |
   | Authorization URL | * If you are using a multi-tenant app registration, click the lock icon![Lock icon](), enter <kbd class="ph userinput">https://login.microsoftonline.com/common/oauth2/v2.0/authorize</kbd>, and then click the lock icon again. * If you are using a single tenant app registration, click the lock icon![Lock icon](), enter <kbd class="ph userinput">https://login.microsoftonline.com/&lt;Directory-ID&gt;/oauth2/v2.0/authorize</kbd>, and then click the lock icon again. In the URL, replace <kbd class="ph userinput">&lt;Directory-ID&gt;</kbd> with the value of Directory (tenant) ID obtained from the Azure portal. {#register-onedrive-oauth__ul_xyv_jxh_f2c} |
   | Token URL | Click the lock icon ![Lock icon](), enter <kbd class="ph userinput">https://login.microsoftonline.com/common/oauth2/v2.0/token</kbd>, and then click the lock icon again. |
   | Redirect URL | Click the lock icon ![Lock icon](), enter <kbd class="ph userinput">https://&lt;instance&gt;.service-now.com/oauth_redirect.do</kbd>, and then click the lock icon again. |
   [ ]

   {#register-onedrive-oauth__table_alw_kq3_gfb}
5. In the OAuth Entity Scopes related list, add scopes to match the permissions you defined when you configured the Microsoft OneDrive application.  
   Click Insert a new row and enter the name and the OAuth scope of the permission. The name and the OAuth scope are often the same string. Ensure that these scopes are provided.{#register-onedrive-oauth__table_mfg_t1y_cnb__entry__2}

   | Name | OAuth scope |
   |-|-|
   | Calendars.ReadWrite | Calendars.ReadWrite |
   | Calendars.ReadWrite.Shared | Calendars.ReadWrite.Shared |
   | email | email |
   | Files.Read | Files.Read |
   | Files.Read.All | Files.Read.All |
   | offline_access | offline_access |
   [ ]

   {#register-onedrive-oauth__table_mfg_t1y_cnb}  
   Note:  
   The scopes mentioned here must be same as the API permissions provided during the [custom
   app
   configuration](https://www.servicenow.com/docs/TiWP7jqOGioyIDWto394tg#configure-onedrive-application "Create a custom OAuth application from your Microsoft OneDrive account to enable OAuth 2.0 authentication with the Microsoft OneDrive spoke.").
6. Right-click the form header, and click Save.  
   The system validates the OAuth credentials.
{#register-onedrive-oauth__steps_usf_jfp_ng}

## Create Connection and Credential Alias for Microsoft OneDrive spoke {#ariaid-title4}

Create Connection records to your Microsoft OneDrive account. The Microsoft OneDrive spoke connection and credential aliases use these connections to perform actions in the
Microsoft OneDrive.

### Before you begin

Role required: admin

### Procedure

1. Navigate to AllIntegrationHubConnections \& CredentialsOneDrive.
2. From Related Links, click Create New Connection \& Credential.
3. On the form, fill in these fields:  
   {#create-connection-credential-alias-onedrive__table_alw_kq3_gfb__entry__2}

   | Field | Value required |
   |-|-|
   | Connection Name | Name to identify the connection. This field is automatically set to Microsoft Onedrive Spoke Connection |
   | Connection URL | The URL to make connection to the spoke. This field is automatically set to https://graph.microsoft.com |
   | OAuth Entity Name | Name of the OAuth entity profile. This field is automatically set to Microsoft Onedrive Spoke Auth. |
   | OAuth Client ID | Client ID of the OneDrive application you registered in Microsoft Azure App registration portal. |
   | OAuth Client Secret | Client Secret generated when you registered the application in Microsoft Azure portal. |
   | OAuth Redirect URL | The redirect URL. The format of the URL is https://\<your-instance\>.service-now.com/oauth_redirect.do |
   [ ]

   {#create-connection-credential-alias-onedrive__table_alw_kq3_gfb}
4. Click Create and Get OAuth Token.

### Result

The Microsoft OneDrive spoke is set up and integrated with the ServiceNow instance.

*[\>]: and then