How do I configure OAuth2 permissions for OneDrive/SharePoint in n8n?

Below is some guidance on how to get your OneDrive (SharePoint) credentials working correctly in n8n:

1. Register Your Application in Microsoft Azure

Even if your connection is “successful” on the surface, your app must have the correct permissions. For OneDrive (and SharePoint) access you need to register your application with the Microsoft Identity Platform and ensure that it has the proper Graph API permissions. This typically involves:

• Creating an app in the Microsoft Application Registration Portal.
• Using the OAuth2 flow: copy the OAuth Callback URL from your n8n credential into your app’s Redirect URI settings. Note that on n8n Cloud the callback/redirect URL may not be visibly displayed in the credential settings even though it’s used internally – this is normal for n8n Cloud.

2. Configure the Correct Scopes/Permissions

Make sure to add the necessary scopes for OneDrive and SharePoint to your registered application. For example, you might need scopes like:

• Files.Read and Files.ReadWrite
• Sites.Read.All
• Sites.ReadWrite.All

Your app must be granted admin consent for these scopes so the token returned during OAuth2 has permission to access shared documents on SharePoint.

3. Verify the OAuth2 Setup in n8n

Since you’re running on n8n Cloud, the experience is streamlined compared to self-hosted instances. Although you don’t see a callback URL when adding credentials, n8n Cloud automatically uses its built-in OAuth2 endpoint. The key steps are:

• Click “Connect my account” in the credential setup.
• Complete the Microsoft sign-in and consent flow.
• Ensure that you have pasted the Client ID (and Client Secret, if prompted) into the credential fields.

Even if you get a “connection successful” message, if the token doesn’t contain the required permissions, your nodes will fail with a “don’t have the permission” error.

4. Review Microsoft’s Documentation

Microsoft’s docs (via the Microsoft Graph API) provide details on the scopes that each service requires. Check out the Microsoft OAuth2 documentation and confirm that your app registration matches those requirements.

In Summary

Even though n8n Cloud hides some details like the callback URL, the key to a working OneDrive/SharePoint integration is:

• Register and correctly configure your Microsoft app
• Add and consent to the proper Graph API permissions/scopes
• Use those credentials in n8n so that the OAuth2 flow returns a token with full access

Once these are in place, your node operations should have the permissions needed to access the client’s shared documents.

If you continue to have issues, double-check the permissions in your Azure portal and that your app has been granted admin consent for all required scopes.

Happy automating!