Create a Microsoft OAuth app for OpenConnector

Use a Microsoft Entra app registration when OpenConnector needs to connect Microsoft Graph providers such as Outlook, OneDrive, or Excel.

OpenConnector services

The tenant value is the Microsoft identity platform tenant segment used in the authorization and token URLs. Common values are common, organizations, consumers, or a specific tenant ID.

Prerequisites

• A running OpenConnector runtime.
• Access to Microsoft Entra admin center or Azure app registrations.
• Permission to register an app and create a client secret.
• The OpenConnector origin users open in the browser, such as http://localhost:3000 or https://connect.example.com.

Step 1: Set the OpenConnector callback URL

Build the callback URL by appending /oauth/callback to your OpenConnector origin. For local testing, use http://localhost:3000/oauth/callback. For a public deployment, set OOMOL_CONNECT_ORIGIN, restart OpenConnector, and use the public callback URL, such as https://connect.example.com/oauth/callback.

Step 2: Register a Microsoft app

In Microsoft Entra admin center:

1. Open App registrations.
2. Create a new registration.
3. Choose the supported account type that matches your users.
4. Add a Web redirect URI with the exact OpenConnector callback URL.
5. Register the app.
6. Open Certificates & secrets and create a client secret.
7. Open API permissions and add the delegated Microsoft Graph permissions required by the OpenConnector service.

Microsoft’s official guide is Register an application with the Microsoft identity platform. Microsoft also documents that the redirect URI sent in the auth request must match a registered redirect URI in the authorization code flow.

Step 3: Copy the client values

Copy the client secret value when it is created. Microsoft will not show the full secret value again later.

Step 4: Save the client in OpenConnector

OpenConnector’s Microsoft providers require the extra tenant value. Use an OpenConnector console version that shows the tenant field in the OAuth client form before following this guide.

1. Open the OpenConnector web console, such as http://localhost:3000.
2. Open Providers and select Outlook, OneDrive, or Excel.
3. Choose Configure OAuth Client or Edit OAuth Client.
4. Paste the Microsoft application client ID and client secret value.
5. Fill Tenant with common, organizations, consumers, or your tenant ID.
6. Choose Save OAuth Client.

Repeat these steps for one_drive or excel when configuring those services.

Step 5: Connect and test

After saving the OAuth client config, choose Connect on the Microsoft provider page. Sign in with the Microsoft account, approve consent, return to OpenConnector, and confirm that the provider page shows the account as connected.

Use the console action details before running Microsoft Graph actions. If outlook.list_messages is not available in your catalog version, choose another read action shown for the provider.

Troubleshooting