Set up the OneDrive storage provider

The OneDrive storage provider lets end users map their OneDrive storage into container-based sessions. Access is provided through the Microsoft OAuth interface and the Rclone Docker volume plugin. For reference, see the Rclone OneDrive documentation and the Microsoft app registration quickstart.

Create a Microsoft OAuth app

1. Log in to the Microsoft Azure Portal.
2. Select Azure Active Directory.

Azure AD Control Panel

3. Select App Registrations.

App Registrations

4. Select New Registration.
5. Give the app a name, such as Kasm OneDrive Example.
6. In Supported account types, select Accounts in any organizational directory (Any Azure AD directory - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox).
7. In the redirect URI, select Web, then enter the redirect URL, substituting the hostname of the Kasm deployment: https://kasm.example.com/api/cloud_storage_callback.

caution

This example creates an integration where any Microsoft user can authenticate with the Kasm app, which is ideal for a public-facing deployment. Other options are available for single-tenant and multi-tenant configurations.

Register an App

8. On the next page, the Application (client) ID is shown. Save this value as the Client ID for the next section.
9. Select Add a certificate or secret next to Client credentials.

Client Credentials

10. Select the Client secrets tab, then click New client secret.
11. Enter a description and expiration, then click Add.
12. The credentials are shown. Save the Value as the Client Secret for the next section.

Client Secret

13. From the Manage menu on the left, select API Permissions.
14. Select Add a Permission.

API Permissions

15. In the new window, select Microsoft Graph, then Delegated permissions.

16. Add all of the following permissions:

    Files.Read
    Files.Read.All
    Files.ReadWrite
    Files.ReadWrite.All
    offline_access
    Sites.Read.All
    User.Read

Add Permissions

17. Select the Overview section of the Azure app, then select Endpoints. Note the OAuth 2.0 authorization endpoint (v2) and OAuth 2.0 token endpoint (v2) values for the next section. These values differ depending on the app type created in the previous section, that is internal, public, or multi-tenant.

Endpoints

Configure the storage provider

1. Log in to the Kasm UI as an administrator.
2. Select Settings, then Storage, then Add.
3. Complete the form with the following entries, using the Client ID and Client Secret from the previous section:

Field	Value
Name	OneDrive
Storage Provider Type	OneDrive
Enabled	checked
Client ID	<client id>
Client Secret	<client secret>
Authorization URL	<OAuth 2.0 authorization endpoint (v2) value from the Microsoft OAuth app>
Authorization URL Options	{"prompt" : "consent"}
Token URL	<OAuth 2.0 token endpoint (v2) value from the Microsoft OAuth app>
Redirect URL	https://<hostname>/api/cloud_storage_callback
Scope	Files.Read Files.ReadWrite Files.Read.All Files.ReadWrite.All Sites.Read.All offline_access openid email profile
Root Drive URL	https://graph.microsoft.com/v1.0/me/drive/root
Default Target	/onedrive
Volume Config	{ "driver" : "rclone", "driver_opts" : { "type" : "onedrive", "uid" : "1000", "gid" : "1000", "allow_other" : "true" } }
Mount Config	{}

4. Click Save.

OneDrive storage mapping configuration

1. From any page, select the profile icon at the top right.

Edit Profile

2. Select the Cloud Storage section, then Add Storage Mapping.

Add Storage Mapping

3. Select OneDrive from the drop-down, then select Next.

Configure Storage

4. The Microsoft login page appears. Log in with the desired account.

Login

5. A consent screen appears that requests the permissions needed to access OneDrive. Approve the request.

Approve Kasm

6. Kasm redirects you to the Workspaces dashboard. The new storage mapping appears in the Cloud Storage section of the profile.

Storage Mapping

7. Launch a new container-based session. Confirm that OneDrive is mapped inside the session at the /onedrive location.

In Session View