# OneDrive Setup: Connect & Transfer Files > Connect Blober to Microsoft OneDrive to browse, upload, download, delete, and transfer files. Blober connects to your OneDrive through Microsoft Graph. The first setup usually takes about five minutes. ## What works * ✅ Personal OneDrive * ✅ Your default work or school OneDrive * ✅ Browsing files and folders * ✅ Uploading and downloading files * ✅ Creating missing destination folders * ✅ Moving deleted files and folders to the OneDrive recycle bin * ✅ Reading file names, sizes, and dates * ✅ Resuming large uploads Blober accesses only the OneDrive of the account you sign in with. It does not use an organization-wide administrator account. ## Before you start You need: * A Microsoft account with OneDrive * Permission to create an app registration * Blober installed on the same computer where you complete sign-in > **Note** > > Some work or school organizations prevent users from creating apps or approving permissions. If an administrator approval message appears, send this guide to your Microsoft 365 administrator. ## Part 1: Create the Microsoft app ### 1. Register the app 1. Open the [Microsoft Entra admin center](https://entra.microsoft.com/). 2. Sign in with your Microsoft account. 3. Open **Entra ID** > **App registrations**. 4. Select **New registration**. 5. Enter `Blober OneDrive` for the name. 6. Under **Supported account types**, select: **Accounts in any organizational directory and personal Microsoft accounts** 7. Leave **Redirect URI** empty for now. 8. Select **Register**. ![Register an application with the Blober OneDrive name and the multitenant plus personal accounts option selected](/kb/_astro/onedrive-register-app.3Pf71MIA_2sDMs4.webp) ### 2. Copy the client ID The app's **Overview** page opens after registration. 1. Find **Application (client) ID**. 2. Copy it somewhere temporarily. ![Blober OneDrive app overview showing where to copy the Application client ID](/kb/_astro/onedrive-client-id.I0KYu2nA_2bJE08.webp) Use the **Application (client) ID**, not the Object ID or Directory (tenant) ID. It looks like this: ```text 00000000-0000-4000-8000-000000000000 ``` > **Note** > > Blober asks only for the **Application (client) ID**. It does not use a client secret. ### 3. Add the sign-in return address 1. In the app's left menu, open **Authentication** or **Authentication (Preview)**. 2. Select **Add a platform**. 3. Select **Mobile and desktop applications**. ![Configure platforms panel with Mobile and desktop applications highlighted](/kb/_astro/onedrive-add-platform.u9Nn3dCU_Z1cHkOm.webp) 4. Under **Custom redirect URIs**, enter exactly: ```text http://localhost/onedrive/callback ``` ![Configure Desktop and devices panel with the OneDrive callback entered under Custom redirect URIs](/kb/_astro/onedrive-redirect-uri.BpO2kUsD_Z14XsHq.webp) 5. Select **Configure**. The path is case-sensitive. Do not add a port number, trailing slash, or query parameters. Microsoft accepts the temporary local port that Blober uses during sign-in. ### 4. Add OneDrive permission 1. In the app's left menu, open **API permissions**. 2. Select **Add a permission**. 3. Select **Microsoft Graph**. 4. Select **Delegated permissions**. 5. Search for `Files.ReadWrite`. 6. Check **Files.ReadWrite**. 7. Select **Add permissions**. ![Microsoft Graph delegated permissions with only Files.ReadWrite selected](/kb/_astro/onedrive-files-permission.BdDp1wq1_Onxkz.webp) Your configured permissions should show one delegated permission: **Files.ReadWrite**. ![Configured Microsoft Graph permissions showing only delegated Files.ReadWrite access](/kb/_astro/onedrive-api-permissions.DqmO4gzV_ZgqBNj.webp) `Files.ReadWrite` lets Blober read, create, replace, and delete files in the signed-in user's OneDrive. It does not give Blober unattended access to every user in an organization. You do not need `Files.ReadWrite.All`, `Sites.ReadWrite.All`, or an application permission. If `User.Read` was added automatically, you can remove it. Blober does not use that permission. ## Part 2: Connect OneDrive in Blober []() 1. Open Blober. 2. Go to **Workflows** > **New Workflow**. 3. Select **Microsoft OneDrive** as the source or destination. 4. Paste the **Application (client) ID** into the Microsoft application client ID field. 5. Enter the email address of the Microsoft account you want to connect. 6. Select **Authorize Microsoft OneDrive**. 7. Sign in with that Microsoft account. 8. Review the requested file permission and select **Accept**. 9. After Microsoft reports success, close the browser tab and return to Blober. You can now browse your OneDrive and run a transfer. > **Tip** > > Test the connection by opening the folder picker. If your OneDrive files appear, setup is complete. ## File behavior ### Uploads * Files up to 250 GB are supported. * Missing destination folders are created automatically. * An existing file with the same destination name is replaced. * Large files use resumable uploads. ### Downloads Microsoft Office files stored in OneDrive are ordinary files. Unlike native Google Docs, they do not need export conversion before download. ### Deletes Deleting through Blober moves an item to the OneDrive recycle bin. It does not permanently erase the item immediately. ## Troubleshooting ### "The reply URL does not match" or `AADSTS50011` The redirect URI is missing or different. 1. Open your app registration. 2. Go to **Authentication**. 3. Confirm it is under **Mobile and desktop applications**. 4. Confirm the value is exactly: ```text http://localhost/onedrive/callback ``` ### "Need admin approval" Your organization blocks user consent or app registration. * Ask your Microsoft 365 administrator to approve the delegated `Files.ReadWrite` permission. * Do not work around the policy by adding broader permissions. Microsoft classifies `Files.ReadWrite` as not requiring administrator consent by default, but an organization can enforce stricter rules. ### OneDrive is not licensed or could not be provisioned The signed-in work or school account may not have a OneDrive license. * Open [OneDrive on the web](https://onedrive.live.com/) with the same account. * If this is a managed organization account, ask the administrator to assign a OneDrive license. * Then reconnect in Blober. ### Authentication expired Blober uses the saved Microsoft refresh token to replace short-lived access tokens automatically. Normal access-token expiry does not require any action. Microsoft refresh tokens typically expire after 90 days without use and can also be revoked by you or an administrator. When Microsoft can no longer refresh the connection, open the workflow for editing. Under **Microsoft application client ID**, select **Authorize Microsoft OneDrive** and sign in again. Existing workflows and files are not deleted. ### Files or folders are missing Blober shows only the signed-in account's default drive. It does not show: * **Shared with me** * SharePoint and Teams document libraries * OneDrive shortcuts to another drive * OneNote notebooks * Additional drives belonging to groups or sites Microsoft's old `sharedWithMe` API returns references to items in other drives, not a folder inside your drive. Reading those items requires the broader `Files.Read.All` or `Files.ReadWrite.All` permission. Microsoft has deprecated the API and says it will stop returning data after November 2026, so Blober does not request the broader permission or build on that endpoint. An **Add shortcut to My files** entry still points to the other drive and is also skipped. To transfer a shared item, download it and upload it to your own OneDrive as an ordinary file first. ### Upload rejected because of the name OneDrive does not allow these characters in a file or folder name: ```text " * : < > ? / \ | ``` Names also cannot begin or end with a space or end with a period. Windows reserved names such as `CON`, `AUX`, `NUL`, `COM1`, and `LPT1` are rejected. OneDrive names are case insensitive, so `Report.docx` and `report.docx` cannot exist in the same folder. ### An iPhone Live Photo fails during transfer OneDrive can report the combined Live Photo size for a `.heic` file while its download endpoint returns only the still image. The size mismatch can stop the transfer. Export the photo from OneDrive and transfer the exported file instead. ## Security and privacy * Sign-in happens on Microsoft's website, not inside a Blober password form. * Blober never receives your Microsoft password. * The app uses delegated access for the account that signs in. * No client secret is required or stored. * You can revoke access from [Microsoft account privacy settings](https://account.live.com/consent/Manage) or your organization's [My Apps portal](https://myapps.microsoft.com/). > **Terms compliance** > > Your use of OneDrive through Blober is subject to [Microsoft's Services Agreement](https://www.microsoft.com/servicesagreement). See our [Terms of Service](/kb/docs/terms-and-privacy/terms-of-service/) for details. ## Current limitations * Government and China cloud endpoints are not supported. * The signed-in user's default drive only. * Copy and move transfers pass through the computer running Blober, so Blober must remain open until the transfer finishes. * Personal Vault is not supported. * OneDrive can fail to list a single folder containing about 100,000 items. Split unusually large folders before transferring them. ## Official Microsoft references * [Register an application](https://learn.microsoft.com/entra/identity-platform/quickstart-register-app) * [Desktop redirect URI guidance](https://learn.microsoft.com/entra/identity-platform/reply-url) * [Microsoft Graph permissions reference](https://learn.microsoft.com/graph/permissions-reference#filesreadwrite) * [Access the signed-in user's OneDrive](https://learn.microsoft.com/graph/api/drive-get?view=graph-rest-1.0) * [Microsoft refresh-token behavior](https://learn.microsoft.com/entra/identity-platform/refresh-tokens) * [Deprecated Shared with me API](https://learn.microsoft.com/graph/api/drive-sharedwithme?view=graph-rest-1.0) * [OneDrive file and folder restrictions](https://support.microsoft.com/office/restrictions-and-limitations-in-onedrive-and-sharepoint-64883a5d-228e-48f5-b3d2-eb39e07630fa)