In Microsoft Azure, App Registration is the process of creating an identity configuration for an application within the Azure Active Directory (Azure AD) environment. This registration allows the application to authenticate and gain authorized access to Azure resources and APIs, including Microsoft Graph, custom APIs, and other protected services.
By registering an application in Azure AD, administrators can:
App Registration is a crucial step for enabling secure integration between applications and Azure services. It forms the foundation for implementing Single Sign-On (SSO), securing APIs, and automating workflows with the Microsoft identity platform.
You must be able to log in to the Azure Portal.
Application name (a friendly identifier) and, optionally, a redirect URI (mainly for delegated flows — not mandatory for OIC REST integration).
An understanding of Microsoft Graph endpoints, and the required permissions: Files.ReadWrite.All and Sites.ReadWrite.All.
An Oracle Integration Cloud (OIC) instance where the REST connection will be created.
Follow these steps to register your application in Azure AD and generate the credentials OIC will use to authenticate against Microsoft Graph.
Sign in to the Azure Portal. Open https://portal.azure.com in your browser and sign in with an Azure AD account that has admin or appropriate permissions.

Search for App registrations in Azure AD.

Click New registration to open the registration page.

Enter a name for the application and click Register.

The application overview is created — you can see all the registration details on this page.

Open Certificates & secrets and click Add a certificate or secret.

Click New client secret.

Provide a description and an expiry date, then click Add.

Once added, Azure generates a secret value and secret ID. Copy the secret value immediately — it is shown only once.

Now add the API permissions. Open API permissions and click Add a permission.

Select Microsoft Graph.

Choose Application permissions.

Add the permissions you need (for example Files.ReadWrite.All and Sites.ReadWrite.All). These application permissions must be granted admin consent before the API endpoints can be used.

Open Expose an API and click Add a scope.

Enter the mandatory fields and click Add scope.

This is the final overview after the app registration is complete.

After registration you will have the following values. Keep the secret value confidential — treat it like a password and store it in a secure vault.
| Client ID | ba21f3de-****-****-****-************ |
| Object ID | 0ba1af97-****-****-****-************ |
| Directory (Tenant) ID | 1784c736-****-****-****-************ |
| Secret ID | f4107ce2-****-****-****-************ |
| Secret Value | •••••••• (store securely) |
| Application ID URI | api://<client-id> |
| Scope | https://graph.microsoft.com/.default |
Choose the permission (or permissions) marked as least privileged for this API. Use a higher-privileged permission only if your app requires it. For details about delegated and application permissions, refer to the Microsoft Graph permissions reference. For OneDrive folder creation with application permissions, Files.ReadWrite.All is the key permission.
Before building anything in OIC, it helps to validate the Microsoft Graph calls in Postman.
In the request body, supply a JSON representation of the DriveItem resource to create.
Set Content-Type: application/json. The following request creates a new folder in
the user's OneDrive root folder. The @microsoft.graph.conflictBehavior property
tells the service to choose a new name if an item with the same name already exists.
If successful, this method returns a 201 Created response code and a DriveItem resource in the response body.

Postman response — 201 Created with the new DriveItem.
You can also create a file inside the folder directly through the REST API from Postman:
The request payload is the content you want to write into the file.

Uploading file content into the folder via a PUT request.
From your Azure App Registration, gather the following:
In the OIC Console, go to Connections → Create → REST Adapter and configure:

Configuring the REST adapter connection in OIC.
Then configure security using OAuth 2.0:
Save and test the connection.
In OIC, go to Integrations → Create → Scheduled Orchestration and give it a name — for example, CreateOneDriveFolder.

Creating a scheduled orchestration integration.
Drag and drop your Microsoft OneDrive REST connection into the flow, select the POST method, and enter the relative resource URI:
Define the request payload:

Configuring the POST invoke and request payload.
You can hardcode the folder name inside the request so that each scheduled run creates a folder.

Each scheduled run creates a folder in OneDrive.
In this integration, we take a BI Publisher (BIP) report from Oracle Fusion, which contains business data in formats like CSV, Excel, or XML. Using Oracle Integration Cloud, we connect to BIP, download the report, and move it as a file into OneDrive.
The purpose is to automate data sharing. Instead of manually downloading reports and uploading them to OneDrive, the integration makes the process automatic, faster, and error-free. In short:

Configuring the SOAP adapter for BI Publisher.
Create the Microsoft OneDrive REST connection exactly as described in section 4 (Base URI
https://graph.microsoft.com/v1.0) with OAuth 2.0 client-credentials security
— Client ID, Client Secret, token endpoint, and the
https://graph.microsoft.com/.default scope. Save and test the connection.
Choose a Scheduled or App-driven integration.

Add an Assign action and assign the necessary variables.

Invoke the SOAP connection and select the operation runReport.


Provide the report path from the Assign and hardcode the remaining values:


Use a Stage File action to write the Base64 output into a file.

Add an Opaque schema file.

Map reportBytes to the opaque element.

Invoke the REST connection to create the folder first. Add the endpoint URI and use the POST method.

In the mapper, hardcode these values:

Invoke the REST connection again to load the data. Use the
PUT method with request media type
application/octet-stream.

In the mapper, give the path of the folder created in OneDrive and map the file reference to the stream reference so the binary file is passed into that OneDrive folder.

This integration creates a folder, pulls the report data from Fusion, and places that data into the created folder.

The folder and report data created in OneDrive by the integration.

The file name given in the integration, now present in OneDrive.
In this guide, we walked through the complete process of integrating Microsoft OneDrive with Oracle Integration Cloud (OIC). Starting with App Registration in Azure, we generated the required credentials (Client ID, Secret, Tenant ID) and assigned Microsoft Graph API permissions. We then validated the connection using Postman to successfully create a folder.
Building on that foundation, we established a REST connection in OIC with OAuth 2.0 and designed a simple scheduled integration to automatically create folders in OneDrive. This integration runs without user input, making it ideal for automation scenarios such as daily folder creation for invoices, reports, or backups.
Finally, we automated the process of extracting a BI Publisher (BIP) report from Oracle Fusion using a SOAP connection, staging the data as a file in OIC, and transferring it to OneDrive using a REST connection:
By combining these steps, we build a seamless integration that moves data from Fusion to OneDrive automatically, without manual effort. The same pattern can be reused for different reports and file types by simply adjusting the parameters and mappings.
Back to All Blogs