OneDrive

Connect OneDrive to collect cloud storage provider evidence automatically.

Connect with an API token

1. In OneDrive:

   1. Sign in to the Microsoft Entra admin center (https://entra.microsoft.com) as at least a Cloud Application Administrator.
   2. Browse to Entra ID › App registrations and select New registration. Enter a Name, select Single tenant only - <your tenant> and select Register.
   3. Select API permissions › Add a permission › Microsoft Graph › Application permissions, select the read-only permission for the data Safeguard reads, select Add permissions, then Grant admin consent for <your tenant>.
   4. Select Certificates & secrets › Client secrets › New client secret, add a description and expiration, select Add, and copy the Value (never displayed again).

   Where to find the other values:

   • Account / Org / Workspace (optional): The app registration's Overview page shows the Application (client) ID.

   OneDrive shows the secret only once, so copy it before you leave the page.

   OneDrive's public documentation does not cover every step.

   Source: learn.microsoft.com, learn.microsoft.com, learn.microsoft.com, learn.microsoft.com, checked 2026-10-07.

2. On Compliance › Connectors, open OneDrive, click Connect, choose API token and fill in:

   Field	What to enter
   API token / Personal access token	Required. Stored encrypted and never shown again.
   Base URL (optional)	—
   Account / Org / Workspace (optional)	—

3. Click Connect with token.

Frameworks

No automated compliance test reads OneDrive yet, so no framework lists it. How connectors provide evidence for frameworks: Frameworks and connectors.

Related

• Cloud Storage Provider connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks