Microsoft 365 change notifications · Self-hosted

Microsoft 365 change notifications

Microsoft 365 change notifications allow Microsoft to inform the Foldr server as soon as a file is added, renamed, edited or deleted directly in OneDrive, SharePoint or Teams, so that Foldr reflects the change without waiting for a user to refresh or for the next scheduled crawl.

Without change notifications, a file uploaded through the Microsoft 365 web interface will not appear in an open folder view in Foldr until the user navigates away and back, and will not appear in search results until the share is next crawled.

This article assumes the Microsoft 365 integration has already been configured on the Foldr server. This is covered in OneDrive & SharePoint Online integration.

What change notifications provide

  • Folder views update automatically. Files added, renamed or deleted directly in Microsoft 365 appear in the Foldr web app without user interaction.
  • Search results stay current. Where the share has Index deltas enabled (on the share’s Search tab), a change in Microsoft 365 also updates the search index, without waiting for the next scheduled crawl.

Change notifications do not alter how files are stored or which users can access them. Existing permissions continue to apply.

Requirements

Application permissions

Change notifications are requested from Microsoft by the registered application itself, not by an individual user account. Microsoft does not issue notifications on behalf of a signed-in user, so Application permissions are required in addition to any delegated permissions already configured.

This applies to both linking modes. Deployments using manual (per-user) account linking have delegated permissions only by default, and change notifications will not function until application permissions are added.

In the Microsoft Azure portal, open the app registration used by Foldr, then go to API permissions > Add a permission > Microsoft Graph > Application permissions and add:

  • Files.Read.All
  • Group.Read.All (only required if presenting Teams storage)

Click Grant admin consent and confirm.

Deployments using automatic (service account) linking already have Files.ReadWrite.All and, where Teams is presented, Group.Read.All as application permissions. No further permissions are required in that case.

Network requirements

Notifications are sent from Microsoft to the Foldr server, rather than requested by the server. The following are required:

  • The Foldr server must be reachable from the internet over HTTPS (TCP 443).
  • The certificate must be issued by a public certificate authority. Self-signed certificates are rejected.

Microsoft validates that the address is reachable at the point change notifications are enabled. Servers that are only accessible on the internal network, or via a VPN, cannot use this feature.

Where the server is published on an external address that differs from the address it uses internally, contact [email protected] so that notifications can be directed to the correct address.

HTTPS inspection

If HTTPS / SSL inspection is performed by a firewall or web filter, graph.microsoft.com and login.microsoftonline.com must be excluded, as covered in the main integration article.

Enabling change notifications

Go to Foldr Settings > Integrations > Microsoft and enable Enable change notifications.

Debounce (seconds) determines how long the server waits after the first change before acting on it. Bulk operations in Microsoft 365, such as copying a large number of files into a library, are collapsed into a single update rather than one per file. The default of 5 seconds is suitable for most deployments. Increase it for libraries that change frequently.

Per-share control

Individual shares can override the server-wide setting. Open the share, select the Advanced tab, and under Microsoft 365 set Change notifications to one of:

SettingBehaviour
Use global settingFollows the server-wide setting. Default.
OnChange notifications enabled for this share.
OffChange notifications disabled for this share, regardless of the server-wide setting.

How changes are detected

Changes are normally reflected within a few seconds, plus the configured debounce period.

Microsoft does not guarantee delivery of every notification, and individual notifications can be lost, particularly on busy Microsoft 365 tenants. The Foldr server also polls Microsoft periodically as a safety net, so a missed notification results in a short delay rather than a folder view that remains out of date indefinitely.

Teams storage behaves slightly differently. A team’s files are not known to the Foldr server until a user opens that team in Foldr, so Teams locations begin reporting changes after they have been visited once. SharePoint sites and OneDrive locations do not require this.

Troubleshooting

If changes made in Microsoft 365 are not being reflected in Foldr, check the following in order:

  1. Application permissions and admin consent. The most common cause, particularly where users link their own Microsoft 365 accounts. Delegated permissions alone are not sufficient and produce no visible error.
  2. External reachability. Confirm the Foldr server is reachable from the internet over HTTPS, using a publicly trusted certificate.
  3. The share setting. Check the Advanced tab of the share in case change notifications are set to Off.
  4. Teams storage only. Confirm the team has been opened in Foldr at least once, then allow a minute for the location to be registered.
  5. Search results specifically. If folder views update but search results do not, confirm Index deltas is enabled on the share’s Search tab, and that the share has been crawled at least once to establish a baseline.

If the issue persists, generate a support bundle and send it to the support team. See Generating a support bundle.

← All articles