Setup Microsoft OneDrive for Document Services
Integrate the ServiceNow instance and Microsoft OneDrive for Document Services by creating a custom OAuth application in Document Services to authenticate ServiceNow requests.
Before you begin
- Request an Integration Hub subscription.
- Set up and connect Microsoft Entra ID Spoke, see Set up Microsoft Entra ID spoke and Microsoft OneDrive Spoke.
Microsoft OneDrive requirements:
- Microsoft OneDrive account
- Microsoft Azure account
- Microsoft OneDrive tenant administrator credentials
Role required: admin
About this task
Complete these steps from your Azure Developer account. See the Azure product documentation for instructions on creating and configuring custom applications.
Procedure
Log in to the Microsoft Azure registration portal with your organization credentials.
For more information, see the Microsoft documentation on the Microsoft Azure App registration portal.
Register a new custom application.
Provide the application name and the supported account type.
Select Register.
Enter the redirect URL in the following format:
https://<instance>.service-now.com/oauth_redirect.do.
An overview of the application's basic information is Displayed.
Copy the application ID to a text file.
You will use this ID and the client secret generated in the next step to register the app as a third-party OAuth provider on your ServiceNow instance. The application ID is the client ID when you connect the application to your ServiceNow instance.
Add a client secret.
In Microsoft Azure, navigate to Manage > Certificates & secrets.
Provide a description and an expiration date.
Select Add.
Enable the permissions you want the application to support.
For more information, see the Microsoft Graph permissions reference documentation.
In Microsoft Azure, navigate to Manage > API permissions.
Click the Microsoft Graph tile.
Select the delegated or application permissions that the application supports.
Delegated permissions enable the application to access the API as a signed-in user.
Application permissions enable the application to run as a background service or daemon without a signed-in user.
You must mention these API permissions in the OAuth Entity scopes tab while configuring the application registry.
Ensure that required API permissions are provided for your custom app.
Name OAuth scope Files.Read Files.Read Files.Read.All Files.Read.All offline_access offline_access Files.ReadWrite Files.ReadWrite Files.ReadWrite.All Files.ReadWrite.All AuditLog.Read.All AuditLog.Read.All Directory.AccessAsUser.All Directory.AccessAsUser.All Directory.Read.All Directory.Read.All User.Read User.Read Select Add permissions.
What to do next
Register Microsoft OneDrive as an OAuth provider for Document Services
Parent Topic:Microsoft OneDrive integration with Document Services