When you or your users set up a OneDrive Personal connection on your Website as a Service website, the authorisation message needs to show your brand instead of ours.

This is done by registering for Microsoft Live API access on a Microsoft account that reflects your company/brand name.

You must already have HTTPS enabled on your WaaS domain in order to enable OneDrive Personal connections.


CONTENTS

  • Use a dedicated Microsoft developer/system account
  • Set up your Microsoft API registration

Use a dedicated Microsoft developer/system account

For this to occur, you need to create a new Microsoft account.
We strongly recommend that you not use an existing personal or work Microsoft account. Instead, create a new one that will be dedicated to your WaaS registration.


Head over to Outlook.com and create a new account there. Make sure to use an email address that reflects your brand name.

Something like mycompany@outlook.com is ideal.

Set up your Microsoft API registration

Login to your Microsoft Azure portal using your Microsoft login details, and then you'll need to register an application via App Registrations with the following configuration.

PropertyConfiguration
Application NameThe user-facing display name for the application.
Supported Account TypesTick:
  • Accounts in any organizational directory (Any Azure AD directory - Multitenant)

OR

  • Accounts in any organizational directory (Any Azure AD directory - Multitenant and personal Microsoft accounts) 
Redirect URI Select the Web option and enter the Callback URL. You can get this from the OneDrive Personal API Access Details on the Site Integrations page in the Branding Center area of our platform



Next, you'll need to navigate to API Permissions and add the following MS Graph API Permissions:


API/Permission NameDescription
offline_accessMaintain access to data you have given it access to
Files.ReadWriteRead, create, update, and delete the signed-in user's files.
User.ReadSign in and read the user profile


Next navigate to Overview > Essentials > Application (client) ID. This ID is the Client ID property required.
Next, you'll need to navigate Certificate & Secrets > Client Secrets (tab) and add New Client Secret.

Copy the Client ID and Client Secret values and paste these into the Microsoft Client ID and Microsoft Client Secret under the OneDrive Personal API Access Details under the Site Integrations page of the web portal. 

Make sure to save your changes to the Site Integrations page.


This should enable you and your clients to create Microsoft Personal account Connections while running on your custom Website as a Service domain.