---
title: OneDrive
description: Forward SAP documents to OneDrive personal or business drives. Supports folder paths, specific drive targeting, and automatic folder creation.
type: onedrive
use_cases:
  - Microsoft 365 document archive
  - Personal library storage for SAP documents
  - OneDrive for Business team file distribution
config_fields:
  - name: folder_path
    type: string
    required: false
    desc: "Folder path within OneDrive (e.g. SAP/Invoices)"
  - name: drive_id
    type: string
    required: false
    desc: "Specific drive ID (default: authenticated user's drive)"
credential_fields:
  - name: client_id
    type: string
    required: true
    desc: "Azure AD Application Client ID"
  - name: client_secret
    type: string
    required: true
    desc: "Azure AD Client Secret"
  - name: tenant_id
    type: string
    required: true
    desc: "Azure AD Tenant ID"
  - name: refresh_token
    type: string
    required: true
    desc: "OAuth 2.0 refresh token"
---

Forward SAP documents to Microsoft OneDrive. FileRelay uses the Microsoft Graph API to upload files to personal or business OneDrive accounts, with automatic folder creation and chunked upload for large files.

## Setup

1. Go to the [Azure Portal](https://portal.azure.com) and navigate to **Azure Active Directory > App registrations**
2. Click **New registration**, give the app a name (e.g. "FileRelay OneDrive"), and set the supported account type
3. Under **API permissions**, click **Add a permission > Microsoft Graph > Delegated permissions** and add:
   - `Files.ReadWrite` — read and write the user's files
   - `offline_access` — maintain a refresh token for background operation
4. Click **Grant admin consent** for the permissions
5. Go to **Certificates & secrets** and create a new **Client secret**; copy the secret value immediately
6. Note the **Application (client) ID** from the Overview page and the **Directory (tenant) ID**
7. Complete the OAuth 2.0 authorization code flow to obtain a refresh token:
   - Direct a browser to `https://login.microsoftonline.com/{tenant_id}/oauth2/v2.0/authorize?client_id={client_id}&response_type=code&scope=Files.ReadWrite%20offline_access&redirect_uri={redirect_uri}`
   - Exchange the authorization code at the `/oauth2/v2.0/token` endpoint for an access token and refresh token
8. In FileRelay, add a **OneDrive** destination with the Client ID, Client Secret, Tenant ID, and Refresh Token

> **REPLACE:** Screenshot of the OneDrive connector configuration form in FileRelay

## How It Works

FileRelay uses the Microsoft Graph API to authenticate via the OAuth 2.0 refresh token flow. On each upload, it exchanges the refresh token for a short-lived access token, resolves the target drive and folder path, and uploads the document.

For files larger than 4MB, FileRelay automatically creates an upload session and uses chunked upload — no configuration needed. This handles files up to 250GB reliably.

## Folder Structure

Documents are uploaded to:

```
{folder_path}/{subfolder}/{doc_id}.{ext}
```

- **folder_path** — the configured path (e.g. `SAP/Invoices`), or root if omitted
- **subfolder** — automatic subfolder based on routing rules (date, repository, or none)
- **doc_id** — the SAP document ID
- **ext** — file extension based on MIME type

Folders are created automatically if they do not exist. FileRelay creates each level of the path as needed.

## Drive Targeting

By default, FileRelay uploads to the authenticated user's primary OneDrive. To target a different drive, set the `drive_id` field:

- **Another user's drive** — Requires application-level permissions (`Files.ReadWrite.All`) and the target user's drive ID
- **SharePoint document library** — For SharePoint sites, use the dedicated [SharePoint connector](/docs/connectors/sharepoint) instead, which provides better support for site resolution and library targeting

You can find a user's drive ID using the Graph Explorer:

```
GET https://graph.microsoft.com/v1.0/me/drives
```

Each drive object includes an `id` field.

## Azure AD Permissions

| Permission | Type | Purpose |
|-----------|------|---------|
| `Files.ReadWrite` | Delegated | Read and write files in the user's OneDrive |
| `offline_access` | Delegated | Maintain a refresh token for background access |

> For application-level access without a user context, use `Files.ReadWrite.All` as an **Application** permission and grant admin consent. This allows access to any user's OneDrive in the tenant.

## Tips

- **OneDrive for Business vs Personal** — Both are supported. Set `tenant_id` to `consumers` for personal Microsoft accounts, or use your organization's tenant ID for business accounts.
- **Storage limits** — OneDrive for Business typically provides 1TB per user. Monitor usage if archiving large volumes of SAP documents. Storage limits can be increased by an admin.
- **Path separators** — Use forward slashes in `folder_path` (e.g. `SAP/Invoices/2026`). FileRelay normalizes paths automatically.
- **Concurrent uploads** — FileRelay handles concurrent uploads gracefully. Multiple routing rules can target the same OneDrive folder without conflicts.
- **Token refresh** — Microsoft refresh tokens for multi-tenant apps remain valid as long as they are used at least once every 90 days. FileRelay refreshes tokens on every upload, so expiry is not a concern during normal operation.
- **Conditional access policies** — If your Azure AD tenant has conditional access policies, ensure the FileRelay app registration is not blocked by location or device-based restrictions.