Microsoft + okta requesting admin approval for third party users

Question

Hi,
We have a web-app that uses OKTA for authentifications purposes.
Recently we added the ability to login using Microsoft. So we created an app on Azure using this instructions :

• https://learn.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app
• https://developer.okta.com/docs/guides/add-an-external-idp/microsoft/create-an-app-at-idp/
  Now the issue is that a lot of our customers are need admin approval messages.
  How can we fix this ?

Thanks

Answer 1

Hi MaurinLenglart-1706 · Welcome to Q&A platform and thank you for reaching out.

Looking at "/common" in the url within the screenshot that you have shared, I assume that the application is a Multi-tenant app and users from other tenants, who are trying to access the app, are getting "Need admin approval" message.

In this case, you can construct adminconsent url and share with the global admin of other tenants whose users want to access the application. Once the Global Admin of a tenant provides the consent, it will be done on behalf of entire organization/tenant. Below is an example of the admin consent url:

https://login.microsoftonline.com/organizations/v2.0/adminconsent?client_id=YOUR_APP_ID&state=12345&redirect_uri=REDIRECT_URI_CONFIGURED_IN_APP&scope=REQUIRED_SCOPES/PERMISSIONS

Read more:

• Using the admin consent endpoint
• Tenant Admin Consent

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.