"Need admin approval" still showing after admin conset granted in portal

Question

An Azure AD admin in my organization exposed an API for our application and added a scope with admin-only consent enabled. We then added the scope to the configured permissions and the admin granted consent for the application. I see the green checkmark in the "Status" column for the scope.

However, when trying to login with that custom scope request, I am still seeing the "Need admin approval" screen. I was expecting this not to be necessary since it was granted in the portal.

Are there additional steps that need to be taken to grant the approval for all users?

Answer 1

Hi,

To add admin consent for an api you have to go enterprise app and select your respective app/api and give consent:

https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/grant-admin-consent#grant-tenant-wide-admin-consent-in-enterprise-apps

That is the place where the associated service principal is managed.

Hope this helps!