MSGRAPH api sign in asks user for Need admin approval

Question

Hello friends,
I have a web app called WORXFLOW-PORTAL
I am using Microsoft graph api from my php web application to sign in user and accept user concent.

I am using following login uri

https://login.microsoftonline.com/common

with following scopes

openid profile User.ReadWrite Mail.ReadWrite Mail.Send Calendars.ReadWrite Contacts.ReadWrite Tasks.ReadWrite

For some users it works ok asking user consent for above permission

For some users it simply shows following as shown in image below

User trying to get access to our web app is outlook free account user.

I read few solutions here but it did not help.

Permission and consent related settings seems to be ok to me.

Please let me know your view about how to check this step by step.

Thank you.

Answer 1

This is the "risk-bsed step up consent" feature, as detailed here: https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/configure-risk-based-step-up-consent
To avoid this from happening, consider verifying your publisher ID, as the feature will automatically flag any non-verified apps when used outside of their "home" tenant.