Issue with Admin Consent URL for Multi-Tenant Service Account

Question

Hi Team,

I have created a service account to execute scripts across our Azure infrastructure spanning multiple tenants. The service account is associated with a multi-tenant app registration.

To enable access for other tenants, I attempted to use the following admin consent URL format:

https://login.microsoftonline.com/<target-tenant-id>/adminconsent?client_id=<client-id>

However, when I attempt to grant admin consent using this URL:

The page enters a continuous login loop.

• I see an "unverified" label for the application (screenshot attached).image (19).png

Despite this, the application does appear under Enterprise Applications in the target tenant.

Could you please help clarify:

Is the consent URL format correct?

1. What does the "unverified" label indicate, and how can we address it?
2. What causes the login loop, and how can it be resolved? However, when I attempt to grant admin consent using this URL:
   • The page enters a continuous login loop.
   • I see an "unverified" label for the application (screenshot attached).
   • Despite this, the application does appear under Enterprise Applications in the target tenant.

Appreciate your support.

Answer 1

Unverified means that you haven't completed the publisher verification process, which helps customers identify applications belonging to ISVs and partners. If you plan to use your application against multiple tenants and not all of them are owned by you/your organization, it's a very good idea to complete the verification process by following the instructions in the article above.