Microsoft OneDrive Reader

Note

This adapter is in preview and is available on Striim Developer only. See Striim Developer for more information.

Microsoft OneDrive is a cloud-based storage solution that allows users to securely store, sync, and share files across devices, enabling seamless collaboration and easy access to documents anytime, anywhere. It integrates with Microsoft 365 applications, enhancing productivity through real-time file sharing and version control.

Striim's Microsoft OneDrive Reader transforms these application entities into relational tables, enabling real-time, efficient migration of data from OneDrive to any relational database or data warehouse. This integration supports advanced analytics, improved reporting, and comprehensive data insights.

Feature summary

Feature		Supported?	Notes
Objects	Standard objects	✓
Objects	Custom objects	✓
Authentication	Basic authentication		Username and password
	OAuth authentication	✓	Manual configuration based
	Custom authentication methods		Not all methods may be supported
Operations	Automated mode	✓
	Initial load	✓
	Pull-based incremental load	✓
	Push-based incremental load
	Automated pipeline
Governance	Connection profile
	Sherlock AI
	Sentinel AI
Schema handling	Initial schema creation	✓	Works with supported targets
Schema handling	Schema evolution
Setup	Wizard template
	Flow Designer	✓
	Striim TQL	✓
Runtime	Resilience/recovery	✓
	Parallel execution
	Metrics	✓	Standard metrics

Supported authentication method

The Microsoft OneDrive Reader supports OAuth authentication. Creating a connection requires creating an OAuth application in Azure AD, obtaining the OAuth credentials, exchanging them for an access token and refresh token, and configuring the connection properties in Striim.

To create an Azure AD application:

In the left navigation pane, select Azure Active Directory > App registrations.
Choose New Registration.
Enter a name for the application.
Specify the types of accounts this application should support:
- For private use applications, select Accounts in this organization directory only.
- For distributed applications, select one of the multi-tenant options.
Set the redirect URI to http://localhost:33333 (default) OR, if you want to specify a different port, specify the desired port.
To register the new application, choose Register. An application management screen displays. Record these values for later use. (You will use the Application (client) ID value to set the Client ID property, and the Directory (tenant) ID value to set the Azure Tenant property.)
Navigate to Certificates & Secrets. Select New Client Secret for this application and specify the desired duration. After the client secret is saved, the Azure App Registration displays the key value. This value is displayed only once, so record it for future use. (You will use it to set the Client Secret property.)
Select the Microsoft Graph API and then add the delegated permissions Files.ReadWrite.All or Files.Read.All. Click the Grant admin consent for the new permissions to take effect.
If you have specified the use of permissions that require admin consent, you can grant them from the current tenant on the API Permissions page.

To obtain the access token and refresh token:

To obtain the authorization code, use a web browser to load this URL request.

GET https://login.live.com/oauth20_authorize.srf?client_id={client_id}&scope={scope}
&response_type=code&redirect_uri={redirect_uri}

Upon successful authentication and authorization of your application, the web browser will be redirected to your redirect URL with additional parameters added to the URL.
```
https://login.live.com/oauth20_authorize.srf?code={authorization_code}
```

After you have received the code value, you can redeem this code for a set of tokens that allow you to authenticate with the OneDrive API. To redeem the code, make the following request:

POST https://login.live.com/oauth20_token.srf
Content-Type: application/x-www-form-urlencoded

client_id={client_id}&redirect_uri={redirect_uri}&client_secret={client_secret}
&code={code}&grant_type=authorization_code

If the call is successful, the response for the POST request contains a JSON string that includes several properties, including access_token, token_type, and refresh_token (if you requested the wl.offline_access scope).
```
{
  "token_type":"bearer",
  "expires_in": 3600,
  "scope":"wl.basic onedrive.readwrite",
  "access_token":"{access_token}",
  "refresh_token":"{refresh_token}"
}
```

Supported objects

The following are the supported objects for reading from Microsoft OneDrive:

Drives
Files
FileVersions
Folders
Permissions
SharedResources
Users