Is there a way to grant admin consent to a multi-tenant app via Azure portal?

Nick Huynh 21 Reputation points
2021-09-08T06:03:04.627+00:00

I registered a multi-tenant application and want to allow SSO using OIDC from other Azure AD.
So when a non-admin user logs in for the first time, user consent must be accepted. Or if a admin user does the log first, then it can grant consent on behalf of other users.
Can Azure AD admin in Azure portal find my registered multi-tenant app and grant the consent prior to the first login so that users don't have to accept consent at their first login or have to do the login using admin user first to grant admin consent?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,521 questions
0 comments No comments
{count} votes

Accepted answer
  1. AmanpreetSingh-MSFT 56,696 Reputation points
    2021-09-08T08:05:11.527+00:00

    Hi @Nick Huynh • Thank you for reaching out.

    Admin Consent via Azure Portal can only be provided for the tenant where the application is registered in the first place. Users or Administrators of other tenants cannot consent via Azure Portal and it has to be done,

    1. Either when user/administrator accesses the multi-tenant application first time.
    2. Or by constructing the Admin Consent URL and sharing it with the Administrators of the other tenants.

    Below is an example of the Admin Consent URL:

    https://login.microsoftonline.com/organizations/v2.0/adminconsent  
            ?client_id=6731de76-14a6-49ae-97bc-6eba6914391e  
            &scope=https://graph.microsoft.com/Calendars.Read https://graph.microsoft.com/Mail.Send  
            &redirect_uri=http://localhost/myapp/permissions  
            &state=12345  
    

    Read more: Request the permissions from a directory admin

    -----------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.