Connect OneDrive
Register a free app in Azure and connect your OneDrive to KumoYami.
Microsoft only lets registered applications read a OneDrive. Registering yours is free and you only do it once: after that, KumoYami keeps the permissions renewed by itself.
Before you start: a Microsoft Entra directory
Registering applications requires a Microsoft Entra directory. A personal account on its own (outlook.com, hotmail…) can no longer create them: Azure shows a warning that creating applications outside a directory is deprecated.
The fix is to create a free Azure account with that same email at azure.microsoft.com/free. It asks for a card to verify your identity but doesn't charge it, and it creates the "Default Directory". Registering applications in it is always free, even after the trial period ends.
Register the app and connect
Start in the panel
In KumoYami's panel, Add storage → OneDrive. The form shows your site's redirect URI with a button to copy it,
for example https://nube.example.com/api/admin/onedrive/callback/. Leave the form open.
Register the application in Azure
In portal.azure.com → App registrations → New registration:
- Supported account types: accounts in any organisational directory and personal Microsoft accounts.
- Redirect URI: platform Web, and paste the URI from the previous step.
Click Register.
Copy the app's ID
On the Overview page, copy the Application (client) ID into KumoYami's form.
Create a secret
In Certificates & secrets → New client secret. Copy the Value column (not the "Secret ID") into the form. It's only shown once.
Grant the permissions
In API permissions → Add a permission → Microsoft Graph → Delegated permissions, tick
Files.Read.All and offline_access.
Connect
In KumoYami, save the storage and click Connect on its card. You sign in to Microsoft, accept the permissions and land back in the panel with the account connected. Tokens renew themselves.
Good to know
- The secret expires (after 24 months at most). When it does, create another one in Azure and paste it in by editing the storage.
- Several addresses: if you use the panel from more than one address (say, the local IP and your domain), add each redirect URI in Azure → your app → Authentication.
- Several accounts: you can add several OneDrives; each storage has its own Azure app and its own connection.
- Downloads: in redirect mode, the browser downloads straight from Microsoft, so it doesn't use your server's bandwidth.