OneDrive OAuth Tenant Consolidation (March 31, 2026)

Retirement notice: This document preserves the March 2026 tenant state. Shared-development registration details remain only as cleanup evidence for the approval-gated retirement runbook.

Status

Completed: March 31, 2026

This document records the Azure-side consolidation of the OneDrive OAuth app registrations into the stratofusion.onmicrosoft.com tenant.

Outcome

• OneDrive app registration ownership now lives in one Azure tenant: stratofusion.onmicrosoft.com.
• Environment isolation is preserved with three separate app registrations.
  • Stratofusion Local.
  • Stratofusion Dev.
  • Stratofusion Prod.
• The duplicate Stratofusion Dev registration created during rollout was removed so only the canonical local/dev/prod registrations remain.
• Tenant-wide admin consent was granted for the required delegated Microsoft Graph scopes in stratofusion.onmicrosoft.com.

Supported Account Type

All three OneDrive app registrations should stay on:

• Accounts in any organizational directory and personal Microsoft accounts.

Reason:

• StratoFusion needs to support Microsoft 365 work/school accounts.
• StratoFusion also needs to support personal Microsoft accounts such as Outlook/Hotmail-backed OneDrive.
• A single-tenant app would block personal Microsoft accounts and external Microsoft 365 tenants.

Required Microsoft Graph Permissions