Do I need to grant admin consent to my tenant users to a microsoft.com app?

Question

I am a M365 Global admin (for xyz.com for anonymity purposes) and I have been asked to grant admin consent to my xyz.com tenant users, to a registered published app called clarity.microsoft.com. Do I need to add this specific Microsoft entity into my Azure app and grant access? My users are trying to authenticate to clarity.microsoft.com from their mobile phones with their xyz.com identities.

Thank you

Answer 1

As an M365 Global admin, you do not need to grant admin consent specifically for the "clarity.microsoft.com" app. Microsoft-owned apps, such as "clarity.microsoft.com," are considered trusted within the Microsoft ecosystem, and consent is automatically granted for these apps.

When your users authenticate to "clarity.microsoft.com" using their xyz.com identities, they will go through the regular authentication process and will not require any additional admin consent. The authentication flow will rely on the existing trust relationship between Microsoft and xyz.com.

Therefore, you can inform your users that they can proceed with authenticating to "clarity.microsoft.com" using their xyz.com credentials without the need for additional admin consent on your part.