Onedrive Authorization Issue

Question

Onedrive Authorization Issue

Mageshwari SS 40

Hi Support Team,

We encounter the problem "Need admin approval" when we try to authorize OneDrive using oauth 2.0. The below urls are used

Auth URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize

Access Token URL:https://login.microsoftonline.com/common/oauth2/v2.0/token

Scope: offline_access files.readwrite.all

Clientid and clientsecrets are created using microsoft azure portal of free trail account.

The screenshot of authorization issue

Thanks and Regards,

Mageshwari

Mageshwari SS 40 Reputation points

2025-01-21T05:46:55.8466667+00:00

I have successfully setup OAuth in my Application and Authorization is working fine for OneDrive accounts. However, I need clarification on whether this setup will also work for SharePoint accounts?

I'm experiencing a critical issue that's impacting our customer. I urgently need your assistance to resolve this matter. Please help me as soon as possible.

Accepted answer

1 additional answer

Your answer

Mageshwari SS 40 Reputation points

2025-01-21T05:46:55.8466667+00:00

I have successfully setup OAuth in my Application and Authorization is working fine for OneDrive accounts. However, I need clarification on whether this setup will also work for SharePoint accounts?

I'm experiencing a critical issue that's impacting our customer. I urgently need your assistance to resolve this matter. Please help me as soon as possible.

Answer 1

CarlZhao-MSFT 46,371

Hi @Mageshwari SS

Try logging into your MS Entra ID as a global admin, then find the calling app and grant admin consent for the above permissions.

User's image

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.

Mageshwari SS 40 Reputation points

2025-01-03T08:00:43.9833333+00:00

Hi @CarlZhao-MSFT, I have tried to access the MS Entra ID but the screen shows Interaction required like below screenshot.

Thanks and Regards,Mageshwari
Mageshwari SS 40 Reputation points

2025-01-03T10:14:39.52+00:00

Hi @CarlZhao-MSFT,
Now we have created signup and completed the Microsoft Entra ID account.

Can you please Guide me what next we need to follow to setup Oauth2 for OneDrive with Microsoft graph API?
CarlZhao-MSFT 46,371 Reputation points

2025-01-07T02:30:53.0933333+00:00

Hi @Mageshwari SS

Please make sure you have configured your app as a multi-tenant app that allows personal account login.

Then change /{tenant_id} to /common.
Mageshwari SS 40 Reputation points

2025-01-07T10:40:41.61+00:00

Hi @CarlZhao-MSFT,

Thanks for your Support I have register the application as you mentioned type and created client secret.

Could you please guide me on the next steps to complete the OAuth2? Additionally, could you provide information on the specific API permissions required for this process?

Thanks and Regards,

Mageshwari
Mageshwari SS 40 Reputation points

2025-01-18T12:12:17.98+00:00

Hi @CarlZhao-MSFT,

I have successfully setup OAuth in my Application and Authorization is working fine for OneDrive accounts. However, I need clarification on whether this setup will also work for SharePoint accounts?

Thanks and Regards,

Mageshwari

Answer 2

A while back, Microsoft started enforcing the need for admin consent for any "risky" apps, such as ones from unverified publishers. If this is an application you plan to use across multiple tenants, it is best to provision it within a proper, paid tenant, with the Publisher verification process completed. If it's an app you plan to use in your own tenant, provision it therein as a single-tenant application instead.

Alternatively, you can ask an admin for consent as suggested above, or disable the step-up consent requirement for risky apps as detailed for example here: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/configure-risk-based-step-up-consent

Share via

Onedrive Authorization Issue

1 additional answer

Your answer