Share via

Request for Assistance: "Need Admin Approval" Error

Mukul S 0 Reputation points
2024-04-03T14:06:13.12+00:00

I am reaching out to seek assistance with an issue that we are encountering an authentication issue when users attempt to access our application, which is registered in Azure Active Directory (Azure AD)

Description of the Issue:

When attempting to access Microsoft Project, users are being prompted with an "Admin Approval Required" message despite having been granted all necessary permissions and scopes within the application. The error message states,

"Need admin approval. This app may be risky. If you trust this app, please ask your admin to grant you access."

Affected User(s):

Multiple users within our organization in the same tenant directory experienced this issue.

Steps Taken:

We have thoroughly reviewed and ensured that the affected users have been granted all necessary permissions and scopes within our application.

Additionally, we have checked the OAuth consent settings to confirm that they are configured correctly and have grant admin consent for default directory Under the API permission and under the Enterprise Application.

Under the Microsoft Entra Admin Center we have enabled the Admin consent requests - Users can request admin consent to apps they are unable to consent to​.

User's image

User's image

But still when a user try to authenticate to application, Need admin approval message has been shown. Instead of this it should open the Approval required dialog box but it is not prompting this.
User's image

We have also cleared cache and cookies, and tested the issue from different devices and networks, but the problem persists.

Additional Information:

We are using the latest version of Microsoft Project(ASP.NET CORE MVC ).

Users are accessing Microsoft Project via web browser.

Our organization utilizes Single Sign-On (SSO) for authentication.
I'm using /common as authority.(https://login.microsoftonline.com/common/oauth2/v2.0/token")

Request for Assistance:

We kindly request your assistance in resolving this authentication issue as it is impeding our ability to effectively utilize Microsoft Project for project management tasks.

Any guidance or support you can provide to help troubleshoot and resolve this issue would be greatly appreciated.

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
3,933 questions
Windows 365 Business
Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,677 questions
Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,801 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Babafemi Bulugbe 1,955 Reputation points MVP
    2024-04-03T15:26:24.0566667+00:00

    Hello Mukul S,

    Thank you for posting this in the Microsoft Q&A Community,

    From my understanding, your users are currently experiencing authentication issues while trying to access your application.

    Please be informed that you need to mark your application Publisher verified to resolve this. As you can see here, the application is currently unverified.

    User's image

    Follow the links below to get more information.

    https://learn.microsoft.com/en-us/entra/identity-platform/mark-app-as-publisher-verified

    https://learn.microsoft.com/en-us/entra/identity-platform/publisher-verification-overview

    NB: Always remove personal information when posting

    Let me know if further assistance is needed.

    Babafemi

    0 comments