Even after the admin grants consent to the app, The user is redirected to the "Need Approval" screen ?

Sibi Sharanyan 21 Reputation points
2021-07-30T08:43:30.763+00:00

The users who try to integrate their Microsoft account with us are being forwarded to a "Need Approval" screen. Once they enter the justification and ask for approval, the admin of the office 365 account gets a notification in their admin dashboard. But, Even after the admin has granted consent, the users are still being redirected to the "Need approval" screen. This happens only with Office 365 accounts. What could be the reason for this behavior?

119382-image.png

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,428 questions
{count} votes

Accepted answer
  1. AmanpreetSingh-MSFT 56,306 Reputation points
    2021-08-03T05:50:21.277+00:00

    Hi @Sibi Sharanyan · Thank you for reaching out.

    This issue usually occur when you pass prompt=consent parameter in your authentication request. When passed in the authentication request, this parameter forces the users to respond to consent prompt even if consent is already provided.

    As documented here: Microsoft identity platform and OAuth 2.0 authorization code flow

    • prompt=consent will trigger the OAuth consent dialog after the user signs in, asking the user to grant permissions to the app.

    To resolve the issue, please update your application code to not include prompt=consent in every authentication request.

    -----------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Sibi Sharanyan 21 Reputation points
    2021-08-04T08:54:09.293+00:00

    @AmanpreetSingh-MSFT

    That solved our issue, Thanks a lot!

    I just had to clarify one more thing. How important is the Publisher verification process?
    What are the consequences of not getting verified?

    Is it a good idea to go live with our integration to all our thousands of users without getting verified?

    0 comments No comments