Required URLs and ports for OneDrive

This reference article lists all endpoints used by the consumer version of Microsoft OneDrive. If your organization restricts computers on your network from connecting to the Internet, this article lists the Fully Qualified Domain Names (FQDNs) and ports that you should include in your outbound allowlists to ensure your computers can successfully use the consumer version of OneDrive.

Important

Filtering internet traffic requires advanced networking knowledge and isn't suitable for all customers.

If you are looking for a listing of endpoints used by OneDrive in Microsoft 365, see Microsoft 365 URLs and IP address ranges.

Supported hosts and ports for OneDrive

To use OneDrive, the following endpoints need to be accessible to client computers.

Row	Destination host	Destination Port
1	onedrive.com *.onedrive.com onedrive.live.com login.live.com g.live.com spoprod-a.akamaihd.net *.mesh.com p.sfx.ms oneclient.sfx.ms *.microsoft.com fabric.io *.crashlytics.com vortex.data.microsoft.com posarprodcssservice.accesscontrol.windows.net redemptionservices.accesscontrol.windows.net token.cp.microsoft.com/ tokensit.cp.microsoft-tst.com/ *.office.com *.officeapps.live.com *.aria.microsoft.com *.mobileengagement.windows.net *.branch.io *.adjust.com *.servicebus.windows.net vas.samsungapps.com odc.officeapps.live.com login.windows.net login.microsoftonline.com	TCP 80, TCP 443
2	*.files.1drv.com *.onedrive.live.com *.*.onedrive.live.com storage.live.com *.storage.live.com *.*.storage.live.com *.groups.office.live.com *.groups.photos.live.com *.groups.skydrive.live.com favorites.live.com oauth.live.com photos.live.com skydrive.live.com api.live.net apis.live.net docs.live.net *.docs.live.net policies.live.net *.policies.live.net settings.live.net *.settings.live.net skyapi.live.net snapi.live.net *.livefilestore.com *.*.livefilestore.com storage.msn.com *.storage.msn.com *.*.storage.msn.com	TCP 80, TCP 443