Is there a way to grant admin consent to a multi-tenant app via Azure portal?

Nick Huynh 21 Reputation points

I registered a multi-tenant application and want to allow SSO using OIDC from other Azure AD.
So when a non-admin user logs in for the first time, user consent must be accepted. Or if a admin user does the log first, then it can grant consent on behalf of other users.
Can Azure AD admin in Azure portal find my registered multi-tenant app and grant the consent prior to the first login so that users don't have to accept consent at their first login or have to do the login using admin user first to grant admin consent?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,114 questions
0 comments No comments
{count} votes

Accepted answer
  1. AmanpreetSingh-MSFT 56,446 Reputation points

    Hi @Nick Huynh • Thank you for reaching out.

    Admin Consent via Azure Portal can only be provided for the tenant where the application is registered in the first place. Users or Administrators of other tenants cannot consent via Azure Portal and it has to be done,

    1. Either when user/administrator accesses the multi-tenant application first time.
    2. Or by constructing the Admin Consent URL and sharing it with the Administrators of the other tenants.

    Below is an example of the Admin Consent URL:  

    Read more: Request the permissions from a directory admin


    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments No comments

0 additional answers

Sort by: Most helpful