Drive and Photo Service:Configure Microsoft account sign-in

• As an administrator, go to admin console > exclusive logon configuration > Microsoft sign-in.

• Enable Microsoft sign-in.

• After enabling and configuring this feature, users can sign in with their Microsoft accounts.

Step 1: Get the client ID and tenant ID

• Go to the Microsoft Azure portal and click View.

The View button is located in the Manage Azure Active Directory card on the home page.

• Go to App registrations and click New registration.

• Enter the redirect URI.

  Important

  Replace domainId in the example with your actual enterprise code.

  The callback URL format is https://domainId.api.aliyunpds.com/v2/oauth/callback.

In Name, enter an application name (for example, PDS test). In Supported account types, select Accounts in this organizational directory only (Single tenant).

• Copy the Application (client) ID and Directory (tenant) ID, then click Add a certificate or secret.

Step 2: Create a client secret

• Create a client secret.

On the Certificates & secrets page, click + New client secret. In the Add a client secret panel, enter a Description (for example, PDS test), select an Expires duration (for example, 730 days (24 months)), and then click Add.

• Copy the secret value.

On the application's Certificates & secrets page, click the Client secrets tab, then click + New client secret. After the secret is created, click the copy button in the Value column to save the secret value.

• Return to Cloud Drive for Enterprises (CDE) and go to the admin console>exclusive logon configuration>Microsoft sign-in.

• Paste the copied Application (client) ID into the client ID field.

• Paste the copied client secret value into the client secret field.

• Paste the copied Directory (tenant) ID into the tenant ID field.

• Click Save.

Ensure that the Microsoft sign-in toggle is enabled.