OneDrive
Service ID: onedrive
Get 5 GB of free OneDrive cloud storage! Save your files and photos to OneDrive and access them from any device, anywhere.
At a Glance
- Difficulty
- ⚡MODERATESelf-Service OAuth + Publisher Verification Needed for Cross-Tenant Consent
- Authentication
- OAuth 2.0Authorization Code flow through Microsoft Entra ID.
- Webhooks
- Native — drive.updated only (a library-level change notification; per-file events are not emitted)
- Partnership Required
- No(No partner programme or contract. Publisher verification, via a Microsoft AI Cloud Partner Program account, is the only review step.)
- Partnership Application
- Microsoft Entra publisher verification↗
- Apideck Credentials
- AvailableThe Microsoft consent screen shows "Apideck". Use your own Microsoft Entra app in production.
- Costs
- None. App registration, publisher verification and standard Microsoft Graph calls are free.
- Sandbox Availability
- Available — Access Sandbox↗(A free personal Microsoft account gives you a OneDrive to test against; the Microsoft 365 E5 developer tenant (25 users) is eligibility-gated.)
- Account Type Required
- A personal Microsoft account with OneDrive, or a work or school account whose Microsoft 365 licence includes OneDrive
- Consumer Access Level
- Any user with access to the drive they connect
- Rate Limits
- Per app per tenant: 1,250 to 6,250 resource units/min (1 to 2 units per call), scaling with tenant size; HTTP 429/503 with Retry-After on excess
What are Apideck credentials?
For select connectors, Apideck has established partnerships allowing you to integrate immediately without your own partnership. When using Apideck credentials, “Apideck” appears as the requesting application during OAuth. Learn more about partnership categories →
Responsibility matrix
| Task | You (Customer) | Your Consumer | Apideck |
|---|---|---|---|
| Register a multitenant app in Microsoft Entra ID | ✓ (or use Apideck credentials) | — | Docs provided |
| Complete publisher verification | ✓ | — | — |
| Add Client ID and Client Secret in the Apideck Dashboard | ✓ | — | — |
| Grant admin consent for the organisation | — | ✓ (tenant admin, if the consent policy requires it) | — |
| Authorize the connection and select a drive in Vault | — | ✓ | — |
| Token refresh and credential storage | — | — | ✓ |
| Register and renew webhook subscriptions | — | — | ✓ (automatic per connection) |
| Maintain the connector and unified File Storage API | — | — | ✓ |
Environments
- Testing and production
- OneDrive has no separate sandbox environment: the same Microsoft Entra app and the same Microsoft Graph endpoints serve testing and production, so keep them apart at the account level. Test against a free personal Microsoft account, a Microsoft 365 trial, your own tenant, or a Microsoft 365 E5 developer tenant if you qualify. Apideck's temporary shared test credentials are an option for an early look (request access via https://help.apideck.com/en/articles/7774658). Anything you write during testing lands in a real account, so use one that holds no production files.
🚨Important to Know About OneDrive
- Publisher verification is the hidden gate: since November 2020 Microsoft blocks users in other tenants from consenting to a new multitenant app that is not publisher verified. Plan for it before onboarding, including a publisher domain you own.
- Many work and school tenants switch off user consent, so a tenant admin has to approve the app before anyone in that organisation can connect; plan for an admin-consent step in your onboarding.
- A connection is pinned to one drive: after authorizing, the consumer can point it at a specific drive from a live list of their own drives; left unset, the account's default drive is used. A consumer with several drives, or shared libraries, needs one connection per drive.
- Refresh tokens expire after 90 days without use, so a consumer whose integration is idle for three months has to re-authorise the connection.
⚠️
4 gotchas across 2 resources
Connector-specific behaviors and limitations to be aware of
📦
4 supported resources
View field mappings, supported operations, and schema details