Skip to main content

How do I create my own OneDrive App?

To create your own OneDrive/SharePoint App, complete these steps:

Step 1: Access Microsoft Entra Admin Center

  1. Go to the Microsoft Entra Admin Center
  2. Sign in using your Microsoft account (personal account) or Work/School account
  3. Navigate to Identity → Applications → App registrations in the left-hand menu
  4. Click + New registration at the top

Step 2: Register Your Application

  1. Name: Enter your application's display name (e.g., "My WordPress OneDrive Integration")
  2. Supported account types: Select "Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox)"
  3. Redirect URI:
    • Select Web from the dropdown
    • Enter the OAuth 2.0 Redirect URI shown on your Share-one-Drive settings page
  4. Click Register

Step 3: Copy Application (Client) ID

  1. After registration, you'll see the Overview page
  2. Copy the Application (client) ID (displayed prominently at the top)
  3. Save this ID in your Share-one-Drive plugin settings page

Step 4: Create a Client Secret

  1. In the left menu, select Certificates & secrets (under Manage)
  2. Go to the Client secrets tab
  3. Click + New client secret
  4. Add a description (e.g., "WordPress Plugin Secret")
  5. Select an expiration period (recommended: 24 months)
  6. Click Add
  7. Important: Immediately copy the Value (not the Secret ID) - it will only be shown once!
  8. Save this client secret in your Share-one-Drive plugin settings page

Step 5: Configure API Permissions

  1. In the left menu, select API permissions (under Manage)
  2. You'll see User.Read (Microsoft Graph) already added by default - keep this
  3. Click + Add a permission
  4. Select Microsoft Graph → Delegated permissions

  5. Search for and add the permissions you need based on your requirements:

    • Files.Read - Allows the app to read the signed-in user's files
    • Files.Read.All - Allows the app to read all files the signed-in user can access
    • Files.ReadWrite - Allows the app to read, create, update and delete the signed-in user's files
    • Files.ReadWrite.All - Allows the app to read, create, update and delete all files the signed-in user can access

    SharePoint Permissions (choose one if you need SharePoint access):

    • Sites.Read.All - Allows the application to read documents and list items in all site collections on behalf of the signed-in user
    • Sites.ReadWrite.All - Allows the application to edit or delete documents and list items in all site collections on behalf of the signed-in user

    Always add:

    • offline_access - Allows the plugin to maintain access to content on behalf of the user
    • User.Read - (Already added by default) Allows the app to read the signed-in user's profile

    Recommended minimal setup:

    • Files.Read (Delegated)
    • Sites.Read.All (Delegated) - if SharePoint access is needed
    • offline_access (Delegated)
    • User.Read (Delegated)
  6. Click Add permissions after selecting each permission

Step 6: Grant Admin Consent (If Required)

Note: scope with  .All generally requires admin consent. If you're an administrator:

  1. On the API permissions page, click Grant admin consent for [your organization]
  2. Confirm by clicking Yes
  3. Wait for the status to show green checkmarks

If you're not an admin, contact your IT administrator to grant consent for these permissions.

Step 7: Verify Authentication Settings

  1. In the left menu, select Authentication (under Manage)
  2. Under Platform configurations, verify your Web platform is listed
  3. Confirm the Redirect URI matches the one from your plugin settings
  4. Under Advanced settings, ensure:
    • Allow public client flows: No (default)
    • Enable the following mobile and desktop flows: Leave unchecked

Step 8: Save and Authorize

  1. Save all settings in your Share-one-Drive plugin configuration page
  2. Click the Authorize button in your plugin to complete the OAuth flow
  3. Sign in with a user account and grant permissions

Notice: If you run into issues using your own App, fall back to the default App by clearing the Application (client) ID and Client Secret on the plugin's settings page.

Related articles