Microsoft 365 OneDrive
Connect your company's OneDrive to Cakewalk through Microsoft's Work IQ OneDrive server, using a Microsoft Entra app you register once.
Last updated
Was this helpful?
Connect your company's OneDrive to Cakewalk through Microsoft's Work IQ OneDrive server, using a Microsoft Entra app you register once.
Connect your company's OneDrive to Cakewalk's MCP Gateway through Microsoft's Work IQ OneDrive server, part of Microsoft Agent 365. Every agent tool call against OneDrive passes through the gateway and is evaluated against your company's Policies.
Cakewalk connects through a Microsoft Entra app that your company registers once and reuses for every Microsoft Work IQ connection. Your admin registers the app, grants it the OneDrive permission, and pastes the Tenant ID, Client ID and secret into Cakewalk. Employees then sign in with their own accounts, so every call runs with that person's own OneDrive access.
The Entra app is shared across all Microsoft Work IQ connections. If you already registered it for another Microsoft connection (Calendar, Mail, Word, Teams or SharePoint), skip Steps 1 and 2 and go straight to Step 3.
A Microsoft 365 Copilot license for every employee who will use the connection.
A Microsoft Entra administrator who can register an app and grant admin consent (Global Administrator, Cloud Application Administrator or Application Administrator).
A Cakewalk Admin who can enable the Connection.
The Work IQ servers must be present in your tenant before you can grant permissions to them. Most tenants need this once.
On a machine with PowerShell, download Microsoft's provisioning script: Enable-WorkIQToolsForTenant.ps1.
Run it and sign in with an account that has Entra admin rights and a Microsoft 365 Copilot license.
If the Work IQ APIs already appear when you search in Step 3, you can skip this.
Go to the Azure portal and open Microsoft Entra ID.
Go to App registrations and select New registration.
Give it a name, for example CakewalkMcpClient.
Under supported account types, select Accounts in this organizational directory only (single tenant).
Under Redirect URI, choose type Web and enter:
https://mcp-gateway.getcakewalk.io/api/v1/Auth/CallbackSelect Register.
Open Overview and copy the Application (client) ID and the Directory (tenant) ID.
Open Certificates & secrets, select New client secret, give it a name and expiry, and copy the secret Value now. You cannot read it again later.
In the same Entra app:
Open API permissions, select Add a permission, then APIs my organization uses.
Search for Agent Tools. If nothing appears, search for its app ID ea9ffc3e-8a23-4a7d-836d-234d7c7565c1. If it still does not appear, the Work IQ APIs are not enabled in your tenant yet: complete Step 1 first.
Select the delegated permission McpServers.OneDrive.All and add it.
Select Grant admin consent.
This is the only step that differs per Microsoft Work IQ connection. To add Calendar, Mail, Word, Teams or SharePoint later, reuse the same app and grant that connection's scope here (McpServers.Calendar.All, McpServers.Mail.All, McpServers.Word.All, McpServers.Teams.All, McpServers.SharePoint.All).
Sign in to Cakewalk as an Admin at https://app.getcakewalk.io.
Go to All Connections and select Add org connection > Choose from catalog.
Select Microsoft 365 OneDrive.
Enter the Directory (tenant) ID, Application (client) ID and client secret you copied in Step 2.
From an agent platform connected to Cakewalk, ask the agent to list files in your OneDrive. If OneDrive returns results, the connection is live. In Cakewalk, the Microsoft 365 OneDrive card on All Connections shows as active.
Work IQ OneDrive reference from Microsoft.
Work IQ MCP overview from Microsoft.
Last updated
Was this helpful?
Was this helpful?