Hello,
you don't need the IP addresses, use NBAR and a class map that matches the URL:
class-map match-any ONE_DRIVE
match protocol http host "onedrive.com"
match protocol http url "*.onedrive.com"
match protocol http host "onedrive.live.com"
match protocol http url "*.onedrive.live.com"
That said, OneDrive uses a many more URLs. Below are the ones listed by Microsoft, depending on what your users access, add those to the class map:
login.live.com
spoprod-a.akamaihd.net
*.mesh.com
p.sfx.ms
*.microsoft.com
fabric.io
*.crashlytics.com
vortex.data.microsoft.com
https://posarprodcssservice.accesscontrol.windows.net
redemptionservices.accesscontrol.windows.net
token.cp.microsoft.com/
tokensit.cp.microsoft-tst.com/
*.office.com
*.officeapps.live.com
*.aria.microsoft.com
*.mobileengagement.windows.net
*.branch.io
*.adjust.com
*.servicebus.windows.net
vas.samsungapps.com
odc.officeapps.live.com
login.windows.net
login.microsoftonline.com
*.files.1drv.com
*.*.onedrive.live.com
storage.live.com
*.storage.live.com
*.*.storage.live.com
*.groups.office.live.com
*.groups.photos.live.com
*.groups.skydrive.live.com
favorites.live.com
oauth.live.com
photos.live.com
skydrive.live.com
api.live.net
apis.live.net
docs.live.net
*.docs.live.net
policies.live.net
*.policies.live.net
settings.live.net
*.settings.live.net
skyapi.live.net
snapi.live.net
*.livefilestore.com
*.*.livefilestore.com
storage.msn.com
*.storage.msn.com
*.*.storage.msn.com
