"Approval required" showing even though admin consent has been granted for the whole tenant

Question

The issus is similar to this one but the answer does not apply to my situation.

**
Here is the situation :**
I am software developper. I am developing an integration with microsoft to fetch outlook mails from Microsoft Graph API. I created an app registration in my Azure account, and my users are supposed to install it as enterprise application in their own tenant to use the integration. It works well for personal outlook accounts, and also for most of organisation that are opened to installing application withouth admin consent.

One of my user is strict in terms of security and selected "Do not allow user consent" for the "Configure whether users are allowed to consent for applications to access your organization's data" input in his Azure tenant.

When one of his user requests access, he receives the requests and successfully approves it. But Then, when the user tries to signin again with his account, the request access screes shows again... just like if the admin had not approved. The azure logs in his tenant says "Admin consent is required for the permissions requested by this application. An admin consent request may be sent to the admin."

The admin of this organisation showed me that he approved the application, and the permission looks good. see the screenshot for more context on his application configuration

What should I do on my application registration, or what the user should do on his enterprise application side ?

Answer 1

Are they requiring user assignment for the app? If that option is toggled, consent will always be triggered, it's a known issue that Microsoft is yet to address. Here's a reference article where it's mentioned: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/configure-user-consent?pivots=portal