Tormod Seljenes

This plugin lets you embed a OneDrive folder in WordPress using a shortcode.
Account support:
<ul>
<li>This plugin supports OneDrive Personal (consumer Microsoft accounts) via Microsoft Graph.</li>
</ul>
Features:
<ul>
<li>Embed a shared OneDrive folder as a browsable document library</li>
<li>Breadcrumb navigation</li>
<li>Search within the folder</li>
<li>Open and download actions (configurable)</li>
<li>Optional thumbnails/icons</li>
<li>Access control modes (public, logged-in, roles)</li>
</ul>
Related links:
<ul>
<li>SeljeDrive for Google Drive: https://wordpress.org/plugins/seljedrive-document-library-for-google-drive/</li>
<li>seljeVisitorsFlags: https://wordpress.org/plugins/seljevisitorsflags/</li>
<li>Support Discord: https://discord.gg/CAdgskTt6Q</li>
</ul>
<h3>Third-Party Services</h3>
This plugin connects to external services operated by Microsoft. These services are required for the plugin to function. No data is sent to the plugin author or any other party.
<h4>Microsoft Identity Platform (OAuth 2.0)</h4>
What it is: Microsoft’s authentication service, used to obtain an access token so the plugin can read OneDrive on behalf of the connected Microsoft account.
When it is used:
<ul>
<li>When a site administrator clicks “Connect Microsoft” on the plugin settings page, the browser is redirected to Microsoft’s login page to complete the OAuth flow.</li>
<li>When the stored access token expires, the plugin silently exchanges the refresh token for a new access token in the background. This happens during a REST API request from a site visitor if the token has expired.</li>
</ul>
Data sent:
<ul>
<li>OAuth authorization code (exchanged for tokens; issued by Microsoft and sent back to Microsoft only).</li>
<li>Client ID and client secret (your Azure App Registration credentials; sent to Microsoft to identify your app).</li>
<li>Refresh token (sent to Microsoft when refreshing an expired access token).</li>
</ul>
No visitor data (IP addresses, user accounts, browsing behaviour) is sent to Microsoft through the OAuth endpoints.
Service endpoint: <code>https://login.microsoftonline.com/</code>
Microsoft Privacy Statement: https://privacy.microsoft.com/en-us/privacystatement 
Microsoft Services Agreement: https://www.microsoft.com/en-us/servicesagreement
<h4>Microsoft Graph API</h4>
What it is: Microsoft’s REST API for accessing OneDrive files and folders.
When it is used:
<ul>
<li>When a visitor views a page containing the <code>[so_doc_library]</code> shortcode, the plugin calls the Graph API to list the contents of the configured OneDrive folder.</li>
<li>When a visitor searches, browses into a subfolder, or requests a file download or open link, additional Graph API calls are made.</li>
<li>When a new library is saved and its share URL is first resolved, the plugin calls the Graph API to look up the folder identity.</li>
</ul>
Data sent:
<ul>
<li>The OneDrive folder share URL configured by the site administrator (sent to resolve the shared folder identity).</li>
<li>Access token (sent as a Bearer token in the Authorization header to authenticate each request).</li>
<li>Folder and file identifiers (sent to navigate folder contents, retrieve items, and generate download links).</li>
<li>Search query strings entered by visitors (sent to the Graph API search endpoint).</li>
</ul>
No personally identifiable visitor information is sent to Microsoft through the Graph API. Search queries and folder identifiers are functional data needed solely to retrieve the requested files.
Service endpoint: <code>https://graph.microsoft.com/</code>
Microsoft Privacy Statement: https://privacy.microsoft.com/en-us/privacystatement 
Microsoft Services Agreement: https://www.microsoft.com/en-us/servicesagreement 
Microsoft Graph terms of use: https://learn.microsoft.com/en-us/legal/microsoft-apis/terms-of-use
<h4>Data storage</h4>
The plugin stores the following in the WordPress database:
<ul>
<li>Your Azure App Registration Client ID (plain text WordPress option).</li>
<li>Your client secret value (AES-256 encrypted WordPress option; never exposed in the admin UI after saving).</li>
<li>The OAuth access token and refresh token (AES-256 encrypted WordPress option).</li>
<li>Library configuration (folder share URLs, access settings, display options) as a WordPress option.</li>
</ul>
All stored data is removed automatically when the plugin is uninstalled.
<h4>User tracking</h4>
This plugin does not track, profile, or fingerprint site visitors. No analytics, telemetry, or third-party tracking scripts are loaded. The plugin applies server-side rate limiting (based on IP address, stored as a short-lived WordPress transient) solely to protect the REST API endpoints from abuse; IP addresses are hashed and never logged or transmitted externally.
<h3>Plugin settings</h3>
<h4>Microsoft OAuth</h4>
Client ID 
The Application (client) ID from your Azure App Registration (a GUID). Found in Azure Portal under App registrations → your app → Overview. The plugin validates that this looks like a GUID before allowing you to connect.
Client secret value 
The client secret VALUE from Azure Portal → Certificates & secrets → New client secret. Paste the VALUE column — not the Secret ID column. Microsoft only shows the value once, so copy it immediately after creation. Leave blank when saving to keep an existing secret. The value is stored AES-256 encrypted and is never shown again in the admin UI after saving.
Redirect URI 
A read-only field showing the callback URL you must register in Azure Portal under your App Registration → Authentication → Platform: Web → Redirect URI. Use the Copy button to copy it.
Connect Microsoft / Disconnect 
After a valid Client ID and secret are saved, Connect Microsoft starts the OAuth authorization flow — you will be redirected to Microsoft to sign in and approve access. Disconnect removes the stored access and refresh tokens.
<h4>Libraries</h4>
Name 
A label for this library shown only in the WordPress admin. Not visible to front-end visitors.
Folder Share URL 
The OneDrive sharing link for the folder to display. Create it in OneDrive by right-clicking a folder → Share → Anyone with the link → Copy link. The link typically starts with https://1drv.ms/… The Microsoft account connected in the plugin must have access to this link.
Access 
Controls who can view the library on the front end:
<ul>
<li>Public — visible to all visitors, no login required.</li>
<li>Logged-in users — only visible to WordPress users who are currently signed in.</li>
<li>Specific roles — only visible to users whose WordPress role is in the Allowed roles list.</li>
</ul>
Allowed roles 
Only shown when Access is set to Specific roles. Check every WordPress user role that should be permitted to view this library. If no roles are checked, the library is not accessible to anyone.
Hide Open button 
Removes the button that opens the file inside OneDrive in a new browser tab. Download is still available unless that button is also hidden.
Hide Download button 
Removes the direct download button. The Open button is still available unless that is also hidden.
Remove header from frontend 
Removes the library title and breadcrumb navigation bar above the file list. Useful for minimal or fully custom embed layouts.
Icon is preview of file content 
When checked, image files show a small thumbnail fetched from OneDrive instead of a generic file icon. This may slightly increase loading time for large folders.
Frontend language 
The language used for UI text (button labels, date formats, breadcrumbs) in the embedded library. Defaults to the WordPress site language. Only languages that are both installed in WordPress and available as translation files for this plugin appear in the list.
Root folder label 
A custom display name for the top-level folder shown in the breadcrumb. Leave blank to use the actual folder name from OneDrive.
Allowed file extensions 
A comma-separated list of extensions to display (e.g. pdf,docx,xlsx). Files with other extensions are hidden. Leave blank to show all file types. Do not include dots. Folders are always visible regardless of this filter.

seljeDrive Document Library for OneDrive

Displays a OneDrive folder (shared link) as an explorer-style document library via shortcode.

DigiExpert

DigiExpert8 Forms File Uploader for OneDrive is an independent plugin and is not affiliated with, endorsed by, or sponsored by Microsoft.
The plugin provides:
<ul>
<li>Microsoft OAuth2 connection flow for OneDrive.</li>
<li>Gravity Forms, WPForms, and Contact Form 7 file upload support.</li>
<li>Form ID and Field ID filtering per provider.</li>
<li>Folder templates always control the OneDrive folder path and support placeholders: <code>{form_title}</code>, <code>{provider}</code>, <code>{form_id}</code>, <code>{entry_id}</code>, <code>{date}</code>, <code>{submission_folder}</code>.</li>
<li>Field placeholders are supported, including Gravity Forms and WPForms values like <code>{field_3}</code>, Gravity sub-inputs like <code>{field_1_3}</code>, and name-based placeholders like <code>{passport_number}</code>, <code>{full_name}</code>, or <code>{applicant_name}</code>.</li>
<li>Optional Gravity Forms entry PDF summary upload.</li>
<li>Optional local file deletion after successful upload.</li>
<li>Encrypted storage for client secret and tokens.</li>
</ul>
<h3>External Services</h3>
This plugin connects to Microsoft OneDrive through Microsoft Graph.
It sends data to Microsoft only when: 
* an administrator clicks <code>Connect OneDrive</code> and completes OAuth authorization 
* a configured form submission triggers a file upload to OneDrive 
* optional Gravity Forms PDF summary upload is enabled and a PDF summary is uploaded
Data sent to Microsoft may include: 
* OAuth authorization data required to obtain access and refresh tokens 
* uploaded file contents 
* remote folder and file names built from plugin settings and form submission context
Folder template examples: 
* <code>{form_title}_{field_3}_{field_48}_{entry_id}</code> 
* <code>IDLV_Alex Smith_A1234567_987</code> 
* <code>{form_title}_{full_name}_{passport_number}_{entry_id}</code> 
* <code>{provider}/{form_id}/{field_3}/{entry_id}</code> 
* <code>{provider}/{form_id}/{field_1_3}-{field_1_6}/{entry_id}</code> 
* <code>{provider}/{form_id}/{submission_folder}</code>
Service provider: 
* Microsoft OneDrive / Microsoft Graph
Service documentation and terms: 
* Microsoft Graph: https://learn.microsoft.com/graph/overview 
* Microsoft Terms of Use: https://www.microsoft.com/servicesagreement 
* Microsoft Privacy Statement: https://privacy.microsoft.com/privacystatement
<h3>Troubleshooting</h3>
<ul>
<li><code>AADSTS50011</code> redirect mismatch:
<ul>
<li>The Redirect URI in Entra must exactly match the plugin value, including protocol (<code>https://</code>), domain, path, and trailing slash behavior.</li>
</ul>
</li>
<li><code>OneDrive connection failed</code> after clicking Connect:
<ul>
<li>Save settings first and confirm Tenant ID, Client ID, and Client Secret are not empty.</li>
<li>If secret is regenerated in Entra, paste new secret Value in plugin and save again.</li>
</ul>
</li>
<li>Permission errors from Graph:
<ul>
<li>Confirm <code>Files.ReadWrite</code> is delegated permission (not application permission).</li>
<li>Confirm consent was granted in the same tenant/account you sign in with.</li>
</ul>
</li>
<li>Upload size issues:
<ul>
<li>Current upload call uses Microsoft Graph simple upload (<code>PUT .../content</code>), which supports up to 250 MB per file.</li>
<li>Resumable/chunked upload sessions are not implemented in this plugin version.</li>
</ul>
</li>
</ul>
<h3>Security Notes</h3>
<ul>
<li>Only users with <code>manage_options</code> can configure or connect OneDrive.</li>
<li>OAuth state is validated to prevent CSRF.</li>
<li>Settings forms and actions use WordPress nonces.</li>
<li>Secrets and tokens are encrypted at rest using site salts.</li>
<li>Upload path building sanitizes all path segments.</li>
<li>Local path resolution is restricted to the WordPress uploads directory.</li>
</ul>
<h3>Known Limits</h3>
<ul>
<li>This version uploads immediately on form completion.</li>
<li>Large/resumable upload sessions are not yet implemented.</li>
<li>Upload retries/queue management are not yet implemented.</li>
</ul>

DigiExpert8 Forms File Uploader for OneDrive

Uploads Gravity Forms, WPForms, and Contact Form 7 files to Microsoft OneDrive with secure OAuth and configurable filtering.

seljeDrive Document Library for OneDrive vs DigiExpert8 Forms File Uploader for OneDrive