M365 Admin Consent Requests

Body

Admin consent requests are encountered when you try to log into an app or service which we have not already approved using the “Sign in with Microsoft” option using your university-provided M365 account.

Sign-in page with a field for email or phone number and a "Next" button. Below are logos for SSO, Apple, Google, Facebook, and Microsoft options.

Sign-in page for Microsoft featuring entry fields for email, phone, or Skype. Includes options for account creation and recovery, with a "Next" button.

In order to log into these apps, the service must verify that you are who you say you are, and that requires we allow that app to see information from our Entra tenant to do so. These requests create a ticket directly in our ticketing system and are routed to UTS to approve or deny.

Why do we need to request access?

"Microsoft approval screen prompts admin for apptivo.com access. Lists permissions including data access, reading contacts, calendars, profiles, and tasks."

It is basically a request from you that we trust this app to interact with our tenant and the information it holds.

For security reasons, we are selective on which apps we allow to authenticate against our Entra tenant. Using these requests, we can regulate which apps are used to interact with our Entra tenant, and also provide you the convenience to log into them with your university account should they be approved.

How to request to authenticate to an app with your university account

Approval screen for Microsoft 365 access, requires admin approval to sign in and access data. Options to cancel or request approval are highlighted.

When you request to log in with a Microsoft account, and use your Oakland University M365 account, you will then be prompted to review the permissions for the application, enter a justification for why this application should be granted access. To send the admin consent request in for us to review, simply click Request Approval.

Why was my app request denied?

Most denials are due to security concerns about the source app and the data needs of that app. Obviously, we do not want disreputable or uncontrolled third parties to have access to our tenant data.

Another common reason is that the app may not be available to be used with an enterprise level environment such as ours, and only licensed for individual, personal use.

A reason for the denial will be supplied to explain why this was.

If my application request was approved, do I need to request access every time I need to access the application?

No, once an app has been approved, it will remain approved and you are free to sign into it with your university account.