When implementing SSO using Azure Entra ID, a screen prompting for administrator approval appears after logging in.

Question

When implementing SSO using Azure Entra ID, a screen prompting for administrator approval appears after logging in.

YINGHAN LIU 20

Recently, I implemented a web system that needs to integrate with some companies' Azure Active Directory (AAD) for SSO. For some companies, redirection to AAD for login and then back to the web system works smoothly. However, for one company, after logging in, a screen requesting administrator approval appears. I'm unsure what could be causing this issue. Since I can't inspect the AAD settings of that company in detail, I'd like to ask for advice on what aspects they could check.

Screenshot of the actual

test

Diagram found on the internet

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Domooney-MSFT 2,606 Microsoft Employee Moderator

Hi YINGHAN LIU,

Thank you for posting your query on Microsoft Q&A!

From your screenshot it appears admins in the users tenant do not allow users to consent to applications in this tenant. Requiring admins to provide the consent.

User's image

The user in this tenant must work with their admin to consent to the application.

Do let me know if you have any further queries.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Kind Regards,

Donal

YINGHAN LIU 20 Reputation points

2024-03-20T15:03:14.9333333+00:00

Hi @Domooney-MSFT

Thank you for your response. Based on this setup, it seems that it will apply to all apps. Is there a way to make it effective only for my application without requiring admin confirmation?
Domooney-MSFT 2,606 Reputation points Microsoft Employee Moderator

2024-03-20T15:19:48.5433333+00:00

Hi YINGHAN LIU,

In this users tenant an admin can navigate to the Enterprise Application and click on Permissions - "Grant admin consent for tenant"

If the application is not listed then an admin can do the first sign-in, and provide consent for the organization.

Kind Regards,

Donal
Domooney-MSFT 2,606 Reputation points Microsoft Employee Moderator

2024-04-09T09:32:47.94+00:00

Hi YINGHAN LIU,

I hope you're well! I just wanted to follow-up to see if you had any further issues or queries in relation to this?

Cheers,

Donal

Share via

When implementing SSO using Azure Entra ID, a screen prompting for administrator approval appears after logging in.

0 additional answers

Your answer