Search code examples
azureazure-active-directorymicrosoft-entra-id

Microsoft Social Login Approval Required Popup

The following image is the issue I am facing while trying to add Social Login with microsoft.
enter image description here

Since I am not the global admin of the tenant, I've had to reach out to them for permissions and other settings that I am unable to change by myself.
I have tried the following things so far:

  • Enabling "Allow User Consent for Apps" in Enterprise Applications => Consent & Permissions => User Consent Settings

  • Adding a proper Redirect URI in the App Registration=>"MyApp/Authentication" section

  • I also tried to get the global admin to allow consent through the following URL, but they did not get the prompt to allow permissions at all

I have explored pretty much every document I could find regarding this issue, and the farthest I got was to change a few permissions, which I am unable to do because I am not the global admin.

It is worth mentioning that out of the two permissions in the below image, even though the admin has enabled and saved both, the first one is still not showing up on the account I am using, and I don't know why.
enter image description here
I am not sure how to proceed with this since I am completely new to Azure

Solution

  • While signing in, Approval required popup will occur if below setting is enabled to Yes in that tenant:

    enter image description here

    When I tried to sign in with above setting enabled, I too got Approval required popup like this:

    enter image description here

    To avoid this Approval required popup, you need to disable below option by setting it to No in your tenant:

    enter image description here

    In User consent settings, I enabled "Allow user consent for apps" option as below:

    enter image description here

    When I tried to sign in again after changing above settings, I got below consent screen without need of entering justification:

    enter image description here

    Alternatively, ask your admin to grant consent by visiting Permissions tab of your Enterprise Application here:

    enter image description here

    References:

    java - MS Login API asking for Admin consent for registering with MS azure App - Stack Overflow

    Azure SSO- How to remove approval required screen after sign in - Stack Overflow