How to: use a private Microsoft Entra (Azure AD) application

[ItalyPaleAle]

Wanted to share this with the community in case it helps others too.

Using a private/custom Microsoft Entra (Azure AD) application can help with security in some situations. This is supported by this app, but I couldn't find many docs for how to configure that.

To use a custom AAD app:

1. Using the Azure Portal, create a new app registration:
   • Navigate to: https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/RegisteredApps
   • Click on New Registration, then give the app a name
   • In most cases, you will want the app to be configured for "Accounts in this organizational directory only"
   • Do not set a platform/redirect URI on this page yet
2. Once the app is created, from the main blade:
   • Take note of the value of "Application (client) ID", which is a UUID
   • Take note also of your "Directory (tenant) ID", another UUID
3. Go to the "Manage" -> "Authentication" blade
   • Click on "Add a platform"
   • Select "Mobile and desktop application"
   • Enable these 2 redirect URIs:
     • https://login.microsoftonline.com/common/oauth2/nativeclient
     • https://login.microsoftonline.com/{tenant-id}/oauth2/nativeclient - replace {tenant-id} with the UUID of your tenant

Finally, you can configure the OneDrive CLI with these configuration options:

application_id = "{client-id}"
azure_tenant_id = "{tenant-id}"

Replace {client-id} and {tenant-id} with the UUIDs of your client (application) and tenant, respectively.