OneDrive Setup: Connect & Transfer Files

Blober connects to your OneDrive through Microsoft Graph. The first setup usually takes about five minutes.

What works

• ✅ Personal OneDrive
• ✅ Your default work or school OneDrive
• ✅ Browsing files and folders
• ✅ Uploading and downloading files
• ✅ Creating missing destination folders
• ✅ Moving deleted files and folders to the OneDrive recycle bin
• ✅ Reading file names, sizes, and dates
• ✅ Resuming large uploads

Blober accesses only the OneDrive of the account you sign in with. It does not use an organization-wide administrator account.

Before you start

You need:

• A Microsoft account with OneDrive
• Permission to create an app registration
• Blober installed on the same computer where you complete sign-in

Note

Some work or school organizations prevent users from creating apps or approving permissions. If an administrator approval message appears, send this guide to your Microsoft 365 administrator.

Part 1: Create the Microsoft app

1. Register the app

1. Open the Microsoft Entra admin center.

2. Sign in with your Microsoft account.

3. Open Entra ID > App registrations.

4. Select New registration.

5. Enter Blober OneDrive for the name.

6. Under Supported account types, select:

   Accounts in any organizational directory and personal Microsoft accounts

7. Leave Redirect URI empty for now.

8. Select Register.

2. Copy the client ID

The app's Overview page opens after registration.

1. Find Application (client) ID.
2. Copy it somewhere temporarily.

Use the Application (client) ID, not the Object ID or Directory (tenant) ID. It looks like this:

00000000-0000-4000-8000-000000000000

Note

Blober asks only for the Application (client) ID. It does not use a client secret.

3. Add the sign-in return address

1. In the app's left menu, open Authentication or Authentication (Preview).
2. Select Add a platform.
3. Select Mobile and desktop applications.

4. Under Custom redirect URIs, enter exactly:

   http://localhost/onedrive/callback

5. Select Configure.

The path is case-sensitive. Do not add a port number, trailing slash, or query parameters. Microsoft accepts the temporary local port that Blober uses during sign-in.

4. Add OneDrive permission

1. In the app's left menu, open API permissions.
2. Select Add a permission.
3. Select Microsoft Graph.
4. Select Delegated permissions.
5. Search for Files.ReadWrite.
6. Check Files.ReadWrite.
7. Select Add permissions.

Your configured permissions should show one delegated permission: Files.ReadWrite.

Files.ReadWrite lets Blober read, create, replace, and delete files in the signed-in user's OneDrive. It does not give Blober unattended access to every user in an organization.

You do not need Files.ReadWrite.All, Sites.ReadWrite.All, or an application permission.

If User.Read was added automatically, you can remove it. Blober does not use that permission.

Part 2: Connect OneDrive in Blober

1. Open Blober.
2. Go to Workflows > New Workflow.
3. Select Microsoft OneDrive as the source or destination.
4. Paste the Application (client) ID into the Microsoft application client ID field.
5. Enter the email address of the Microsoft account you want to connect.
6. Select Authorize Microsoft OneDrive.
7. Sign in with that Microsoft account.
8. Review the requested file permission and select Accept.
9. After Microsoft reports success, close the browser tab and return to Blober.

You can now browse your OneDrive and run a transfer.

Tip

Test the connection by opening the folder picker. If your OneDrive files appear, setup is complete.

File behavior

Uploads

• Files up to 250 GB are supported.
• Missing destination folders are created automatically.
• An existing file with the same destination name is replaced.
• Large files use resumable uploads.

Downloads

Microsoft Office files stored in OneDrive are ordinary files. Unlike native Google Docs, they do not need export conversion before download.

Deletes

Deleting through Blober moves an item to the OneDrive recycle bin. It does not permanently erase the item immediately.

Troubleshooting

"The reply URL does not match" or AADSTS50011

The redirect URI is missing or different.

1. Open your app registration.

2. Go to Authentication.

3. Confirm it is under Mobile and desktop applications.

4. Confirm the value is exactly:

   http://localhost/onedrive/callback

"Need admin approval"

Your organization blocks user consent or app registration.

• Ask your Microsoft 365 administrator to approve the delegated Files.ReadWrite permission.
• Do not work around the policy by adding broader permissions.

Microsoft classifies Files.ReadWrite as not requiring administrator consent by default, but an organization can enforce stricter rules.

OneDrive is not licensed or could not be provisioned

The signed-in work or school account may not have a OneDrive license.

• Open OneDrive on the web with the same account.
• If this is a managed organization account, ask the administrator to assign a OneDrive license.
• Then reconnect in Blober.

Authentication expired

Blober uses the saved Microsoft refresh token to replace short-lived access tokens automatically. Normal access-token expiry does not require any action.

Microsoft refresh tokens typically expire after 90 days without use and can also be revoked by you or an administrator.

When Microsoft can no longer refresh the connection, open the workflow for editing. Under Microsoft application client ID, select Authorize Microsoft OneDrive and sign in again. Existing workflows and files are not deleted.

Files or folders are missing

Blober shows only the signed-in account's default drive. It does not show:

• Shared with me
• SharePoint and Teams document libraries
• OneDrive shortcuts to another drive
• OneNote notebooks
• Additional drives belonging to groups or sites

Microsoft's old sharedWithMe API returns references to items in other drives, not a folder inside your drive. Reading those items requires the broader Files.Read.All or Files.ReadWrite.All permission. Microsoft has deprecated the API and says it will stop returning data after November 2026, so Blober does not request the broader permission or build on that endpoint.

An Add shortcut to My files entry still points to the other drive and is also skipped. To transfer a shared item, download it and upload it to your own OneDrive as an ordinary file first.

Upload rejected because of the name

OneDrive does not allow these characters in a file or folder name:

" * : < > ? / \ |

Names also cannot begin or end with a space or end with a period. Windows reserved names such as CON, AUX, NUL, COM1, and LPT1 are rejected. OneDrive names are case insensitive, so Report.docx and report.docx cannot exist in the same folder.

An iPhone Live Photo fails during transfer

OneDrive can report the combined Live Photo size for a .heic file while its download endpoint returns only the still image. The size mismatch can stop the transfer. Export the photo from OneDrive and transfer the exported file instead.

Security and privacy

• Sign-in happens on Microsoft's website, not inside a Blober password form.
• Blober never receives your Microsoft password.
• The app uses delegated access for the account that signs in.
• No client secret is required or stored.
• You can revoke access from Microsoft account privacy settings or your organization's My Apps portal.

Terms compliance

Your use of OneDrive through Blober is subject to Microsoft's Services Agreement. See our Terms of Service for details.

Current limitations

• Government and China cloud endpoints are not supported.
• The signed-in user's default drive only.
• Copy and move transfers pass through the computer running Blober, so Blober must remain open until the transfer finishes.
• Personal Vault is not supported.
• OneDrive can fail to list a single folder containing about 100,000 items. Split unusually large folders before transferring them.

Official Microsoft references

• Register an application
• Desktop redirect URI guidance
• Microsoft Graph permissions reference
• Access the signed-in user's OneDrive
• Microsoft refresh-token behavior
• Deprecated Shared with me API
• OneDrive file and folder restrictions