Onenote Install Auth

Instructions

Step 1: Register an Azure AD Application

1. Navigate to Azure Portal > App Registrations
2. Click New registration
3. Set the Name (e.g., onenote-integration-dev)
4. Under Supported account types, choose:
   • Single tenant — only your organization (most restrictive, recommended for internal tools)
   • Multi-tenant — any Azure AD directory (needed if serving multiple orgs)
   • Multi-tenant + personal — includes personal Microsoft accounts (needed if targeting consumer OneNote)
5. Under Redirect URI, select Public client/native and set URI to http://localhost
6. Click Register and note the Application (client) ID and Directory (tenant) ID

Step 2: Configure API Permissions

1. In your app registration, go to API permissions > Add a permission > Microsoft Graph > Delegated permissions
2. Add the appropriate scope:

3. Click Grant admin consent if you have admin rights (otherwise users see a consent prompt on first login)

Step 3: Install SDKs

Python:

pip install msgraph-sdk azure-identity

TypeScript/Node:

npm install @microsoft/microsoft-graph-client @azure/identity @azure/msal-node

Step 4: Configure Environment Variables

# .env file — NEVER commit this to version control
AZURE_CLIENT_ID=your-application-client-id
AZURE_TENANT_ID=your-directory-tenant-id
# Do NOT set AZURE_CLIENT_SECRET — app-only auth is deprecated for OneNote

Step 5: Authenticate with Python (DeviceCodeCredential)

import os
from azure.identity import DeviceCodeCredential
from msgraph import GraphServiceClient

CLIENT_ID = os.environ["AZURE_CLIENT_ID"]
TENANT_ID = os.environ["AZURE_TENANT_ID"]

# DeviceCodeCredential prompts user to visit a URL and enter a code
# This is the recommended flow for CLI tools and headless environments
credential = DeviceCodeCredential(
    client_id=CLIENT_ID,
    tenant_id=TENANT_ID,
)

scopes = ["Notes.ReadWrite"]
client = GraphServiceClient(credentials=credential, scopes=scopes)

# Verify connection
notebooks = await client.me.onenote.notebooks.get()
if notebooks and notebooks.value:
    for nb in notebooks.value:
        print(f"Notebook: {nb.display_name} (id: {nb.id})")