I am reaching out to seek assistance with an issue that we are encountering an authentication issue when users attempt to access our application, which is registered in Azure Active Directory (Azure AD)
Description of the Issue:
When attempting to access Microsoft Project, users are being prompted with an "Admin Approval Required" message despite having been granted all necessary permissions and scopes within the application. The error message states,
"Need admin approval. This app may be risky. If you trust this app, please ask your admin to grant you access."
Affected User(s):
Multiple users within our organization in the same tenant directory experienced this issue.
Steps Taken:
We have thoroughly reviewed and ensured that the affected users have been granted all necessary permissions and scopes within our application.
Additionally, we have checked the OAuth consent settings to confirm that they are configured correctly and have grant admin consent for default directory Under the API permission and under the Enterprise Application.
Under the Microsoft Entra Admin Center we have enabled the Admin consent requests - Users can request admin consent to apps they are unable to consent to.
But still when a user try to authenticate to application, Need admin approval message has been shown. Instead of this it should open the Approval required dialog box but it is not prompting this.
We have also cleared cache and cookies, and tested the issue from different devices and networks, but the problem persists.
Additional Information:
We are using the latest version of Microsoft Project(ASP.NET CORE MVC ).
Users are accessing Microsoft Project via web browser.
Our organization utilizes Single Sign-On (SSO) for authentication.
I'm using /common as authority.(https://login.microsoftonline.com/common/oauth2/v2.0/token")
Request for Assistance:
We kindly request your assistance in resolving this authentication issue as it is impeding our ability to effectively utilize Microsoft Project for project management tasks.
Any guidance or support you can provide to help troubleshoot and resolve this issue would be greatly appreciated.