Cannot grant organization consent for my application

Question

Hello,

I am developing an application that requires organizational consent. Prior to a few days ago, the consent flow was working but my app was configured to accept consent from my tenant only.

Now, I want to roll out this product to other organizations. I changed the Azure setting to allow consent from all tenants. Unfortunately, the consent flow no longer works. I reach the consent page, but upon "Accept"ing the required permissions, I enter a loop. Each time I hit "Accept", I return to the consent page.

Has anyone else seen this issue. Any advice as to how to resolve it?

Regards,

Seth

Answer 1

Frank,

I initiate my OAuth flow with this URL:

https://login.microsoftonline.com/common/oauth2/authorize?state=&response_type=code+id_token&scope=openid&client_id=&redirect_uri=https%3A%2F%2Flocalhost%3A8082%2Flink%2FoauthorgO365.xhtml&resource=https%3A%2F%2Foutlook.office365.com&prompt=admin_consent&response_mode=form_post&nonce=

I placed the consent page in the Chrome debugger, and the attached screen shot is an outline of what I get. The POST to /Set returns a 200, not a 302, and I am back where I started. This did not happen as recently as a few days ago.

Answer 2

Try adding delegated permissions for every application permission. They shouldn't really be needed for admin consent for a web app and even if they were, it should fail with an error and not a loop. But that's what fixed it for us.