asp.net mvc - Need admin approval in Azure Ad

Question

I have configured AAD login for application and configured user groups for that. Few of the users in the groups are able to login and few of the users are unable to login. For few users it is asking for admin approval.

Below permissions are added

Even I have added the particular users to the application. But no luck. May be I am missing some configurations.

Can anyone help me to solve this?

question from:https://stackoverflow.com/questions/65935887/need-admin-approval-in-azure-ad

Answer 1

Move comment to answer:

I guess you may have permissions that have not been approved by the administrator, or you may not have granted consent to users. Try to follow the steps below:

• Grant the administrator consent for the tenant's permissions. You need to execute the administrator's consent url in the browser, and then use the global administrator to log in and authorize:

  https://login.microsoftonline.com/{tenant}/v2.0/adminconsent? client_id=6731de76-14a6-49ae-97bc-6eba6914391e &state=12345 &redirect_uri=http://localhost/myapp/permissions &scope=https://graph.microsoft.com/.default

• Configure user consent:

• Ensure that your application and users are in the same tenant.

  https://login.microsoftonline.com/{tenant id}/oauth2/v2.0/authorize