Multi-tenant AAD - Need Admin Approval on 2nd tenant
Hi, I have implemented SSO (OAuth2) for Multi-tenant AAD Application. The app permissions donot need admin consent - The app is registered on tenant 1 and SSO is working on tenant 1, but tenant 2 show 'Need admin approval' after the user has consented for the permissions. In tenant 2, User settings under Enterprise applications in Azure portal for 'User can consent to apps accessing company data on their behalf' is enabled. why is admin approval required even though the permissions donot require admin consent? Please help. ThanksDelay between admin consent and ability to perform API requests
We have been experiencing long delays (up to an hour) between the moment the "admin consent" approval of our app until we can successfully perform Graph API calls for the tenant. As part of our on-boarding flow, after the user provides admin consent to our application we start performing various actions via the Graph API. Lately we have been receiving an increasing number of API call failures with "permission denied" response. It can take any time between a few seconds to an hour for the permissions granted in the admin consent form to be recognized by the Graph API. This is causing substantial friction in our on-boarding process. Has anyone else encountered this?
