Prepare Your Microsoft OneNote Unstructured Connection

Before You Begin

To connect Microsoft OneNote to Data 360, you must first configure a Microsoft Azure application to facilitate authentication.

Configure a Microsoft Azure app: Register a new application (for example, OneNote integration) in the Azure portal.
Gather credentials: Make a note of your Client ID (Application ID) and Client Secret.
Gather endpoint URLs: Obtain the OAuth 2.0 authorization endpoint (v2) and OAuth 2.0 token endpoint (v2) URLs from your Azure app endpoints.
Allowlist the callback URL: Allowlist the Salesforce callback URL in your Azure app for OAuth browser authentication. You retrieve this exact URL after setting up the auth provider in Salesforce.

Establish the authentication provider to connect Salesforce with your Azure app.

In Salesforce Setup, navigate to Auth. Providers.
Click New and select Open ID Connect as the Provider Type.
Enter a name for the provider (for example, OneNoteOIDC).
Input your Azure Client ID into the Consumer Key field.
Input your Azure Client Secret into the Consumer Secret field.
Paste the Azure authorization endpoint into the Authorize Endpoint URL field.
Paste the Azure token endpoint into the Token Endpoint URL field.
Click Save.
Note the Callback URL generated at the bottom of the saved Auth Provider page. Add this URL to your Azure app’s callback configurations.

Configure an external credential, a principal, and a standard named credential to manage the authentication flow.

In Setup, navigate to Named Credentials and select the External Credentials tab.
Click New.
Enter a label and name (for example, OneNoteEC).
Select OAuth 2.0 as the Authentication Protocol.
Select Browser Flow as the Authentication Flow Type.
Leave the Scope field empty for now.
Select the Auth Provider you created in the previous section as the Identity Provider.
Click Save.

On the saved External Credential page, scroll down to the Principals section and click New.
Enter a parameter name (for example, OneNotePrincipal) and assign a sequence number.
Select Named Principal as the Identity Type.
In the Scope field, enter exactly: offline_access https://graph.microsoft.com/.default
Click Save.
Under the Principals list, click the Actions dropdown for your new principal and select Authenticate.
Follow the Microsoft login prompts to grant access and confirm. A Success! message indicates the credentials are authenticated and ready to use.