Register application in Azure AD

Context

This documentation is to setup new account in Azure active directory to be used in Microsoft OneNote/SharePoint integration through graph API.

Use the Azure Portal to register your application in Azure AD

After you have a Microsoft tenant with the proper subscriptions, you can register your application in Azure AD.

1. Sign into the Azure portal, using the credential of your Microsoft tenant that has the subscription to Office 365 you wish to use. You can also access the Azure Portal via a link that appears in the left navigation pane in the Microsoft 365 admin center.

2. In the left navigation pane, select Azure Active Directory (1).

3. On the Azure Active Directory page, select App registrations (2), and then select New registration (3).

4. On the App registrations page, select New registration. A new page appears for you to start the registration of your app.

5. On the Register an application page, do the following things:.

   1. Name your app.
   2. Choose who can use the app and access the API.
   3. Provide a redirect URL for user redirect after authentication [This can be modified later as well.]
      1. OneNote - https://<enterprise hostname>/channelview/callback/onenote/
      2. SharePoint - https://<enterprise hostname>/channelview/callback/sharepoint/

6. Click Register to register the new app.

7. Upon successful app registration, Window will appear displaying a message to that effect. Additionally, it will display the Application (client) ID that is auto-generated and auto-assigned to the Microsoft Graph app. Make sure you copy this ID also to notepad.

8. Next, proceed to create a secret for the new app. To achieve this, click on the Certificates & Secrets option (1) under Manage in the left panel. Now, click on the New client secret link (2) in the Client Secrets section in the right panel.

9. When Add a client secret box (3) appears on left appears, provide a Description for the new secret, set expiration, and click the Add button (4) to add the new secret.

10. Once the new secret is successfully created, a key Value (3) will be generated for it. Make a note of this key in notepad as this need in secret configuration. [NOTE: Client secret values cannot be viewed later. Be sure to save the secret when created before leaving the page.]

11. Next, proceed to grant permissions to the Microsoft Graph app, so it can pull the OneNote/SharePoint. For this, click on the API permissions (1) option under Manage in the left panel. Then click on the Add a permission link (2).

12. Then click on Microsoft Graph in the Request API Permissions (3) window that appears.

13. Click on Delegated permissions (1) then search for permissions listed in List of required permissions below in Select permissions (2) one by one and click on checkbox before permission (3). Once all permissions are selected click on Add permissions (4).

List of required permissions

API Name	Claim Value	Permission
Microsoft Graph	offline_access	Maintain access to data you have given it access to
Microsoft Graph	User.Read	Sign in and read user profile
Microsoft Graph	User.ReadBasic.All	Read all users' basic profiles
Microsoft Graph	Notes.Read.All	Read all OneNote notebooks that the user can access
Microsoft Graph	Notes.Read	Read user OneNote notebooks
Microsoft Graph	openid	Sign users in
Microsoft Graph	Sites.Read.All	Read items in all site collections
Microsoft Graph	Files.Read.All	Read all files that the user can access

References

Get started with Office 365 Management APIs

Microsoft Graph REST API v1.0 endpoint reference - Microsoft Graph v1.0