Step 1: Sign in to Azure Portal
Sign in to the Azure portal.
If it asks if you want a tour select "Maybe Later"
Step 2: Register a New Application
In the left-hand navigation pane, click on "Microsoft Entra ID." If you cannot see the navigation panel click on the three lines in the top left of the page next to the Microsoft Azure logo.
Click on "App registrations."
Click on "New Registration"
Enter a name for your application, such as "Medialake - OneDrive.
Select the supported account type. Please select the "Accounts in this organisational directory only".
Enter your Redirect URI. This is the URL where users will be redirected after they authenticate with Microsoft and should look something like this, where your domain is followed by the subdirectory: https://YOUR_DOMAIN/onedrive-redirect
Make sure the platform is selected as "web".
Click on the "Register" button.
Step 3: Configure Permissions
Click on "API permissions" on the left hand side navigation panel. This brings you to the API Permissions page. A Microsoft Graph permission for User.Read should already be filled out for you.
Click on "Add a permission."
Select the API you want to access. In this case we will be adding a permission for the Graph API.
Select the Delegated permissions option.
Either type the following permissions in you wish to add, or search for them in the dropdown lists on the page. Please enable by ticking:
Files.Read.All
User.Read
Step 4: Create a Client Secret
Click on "Certificates & secrets" in the navigation bar on the left hand side of the page. If you can't see the navigation bar, you can click the small arrow in the top left of the page
Click on "New client secret."
Enter a description for the secret, such as "Medialake.ai ", select its expiration, and then click "Add." We suggest putting a date as far in the future as possible to avoid repeating this process regularly when the permission expires.
Copy the value of the secret ID. You will need it to enter on the settings page in the medialake.ai website. This secret will not be shown again, so if you do not copy it correctly, you will have to create a new one.
Step 5: Obtain the Application (client) ID and Directory (tenant) ID
Click on "Overview."
Copy the "Application (client) ID" and "Directory (tenant) ID." You will also need to these values along with the client secret to configure OAuth in the Medialake settings.