What does the "Users can add gallery apps to their Access Panel" setting mean?

[TheHailender]

Hi,

can someone explain what the "Users can add gallery apps to their Access Panel" setting mean?

https://portal.azure.com/#blade/Microsoft_AAD_IAM/StartboardApplicationsMenuBlade/UserSettings/menuI...

Unfortunately I cannot find any understandable documentation :(

Turning on and off has no effect in the access panel of my users?

Thanks for all understandable explanations :)

Jens

[#2]

Did you check the tooltip?

If this option is set to yes, then users may add any app which supports password single-sign on to appear in their Access Panel, without an admin needing to pre-integrate that application.
If this option is set to no, then admins must manually integrate these applications in order for users to see them on their Access Panels.

---

Since app might not support login with the current user credentials, such app will appear "broken" when added to the Access panel/MyApps page. More details here: https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-password-single-sign-o...

[#3]

Hi @Vasil Michev,

But of course I read the tooltip, but unfortunately I did not understand it ;) 

I'm not quite sure what this setting looks like from an end-user perspective. 
Where can a user add SSO apps in his Access panel/MyApps if the setting is set to "yes"? Is see no option, and it is ever probably not meant that the user has the possibility to log in with his O365 account e.g. at Doodle? That's what the "

Users can consent to apps accessing company data on their behalf" setting is for.

And I'm not sure what the phrase "...without an admin needing to pre-integrate that application..." means.

Bye

Jens

[#4]

This is for apps to which you cannot login directly, but have to provide username/password instead, separate from your Azure AD credentials. The usual example is something like accessing company's Twitter account - you need to configure the set of credentials first, and this is where the admin comes in. It has nothing to do with consent, that's separate control. Read the article I linked to above, it should hopefully make things a bit clearer.

[#5]

HI @Vasil Michev,

Thanks for your patience. But I still don't get it. How can a user add an app to his Acces Panel without an admin having to pre-integrate the app? For me, pre-integration means that the app has to be assigned to a user

and has to be made visible to the user

Or does it all have something to do with the self-service functionality?

[#6]

Integration here means setting up the credentials to be used by the app.

[#7]

this is a very late reply, but how are you using this environment? i struggling so much to find a good way to learn this platform. I am overwhelmed with the abundance of information on Microsoft learn. I need a good program with lectures and labs to follow.