Skip to content

Commit 610a7ea

Browse files
committed
improve acrolynx score
1 parent 9f290e3 commit 610a7ea

File tree

1 file changed

+7
-7
lines changed

1 file changed

+7
-7
lines changed

articles/active-directory/manage-apps/application-sign-in-unexpected-user-consent-prompt.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
title: Unexpected consent prompt when signing in to an application
3-
description: How to troubleshoot when a user sees a consent prompt for an application you have integrated with Azure AD that you did not expect
3+
description: How to troubleshoot when a user sees a consent prompt for an application you've integrated with Azure AD that you didn't expect
44
services: active-directory
55
author: omondiatieno
66
manager: CelesteDG
@@ -16,29 +16,29 @@ ms.collection: M365-identity-device-management
1616

1717
# Unexpected consent prompt when signing in to an application
1818

19-
Many applications that integrate with Azure Active Directory require permissions to various resources in order to run. When these resources are also integrated with Azure Active Directory, permissions to access them is requested using the Azure AD consent framework. These requests result in a consent prompt being shown the first time an application is used, which is often a one-time operation.
19+
Many applications that integrate with Azure Active Directory require permissions to various resources in order to run. When these resources are also integrated with Azure Active Directory, the permission to access them is requested using the Azure AD consent framework. These requests result in a consent prompt being shown the first time an application is used, which is often a one-time operation.
2020

21-
In certain scenarios, additional consent prompts can appear when a user attempts to sign-in. In this article, we will diagnose the reason for the unexpected consent prompts showing, and how to troubleshoot.
21+
In certain scenarios, additional consent prompts can appear when a user attempts to sign-in. In this article, we'll diagnose the reason for the unexpected consent prompts showing, and how to troubleshoot.
2222

2323
> [!VIDEO https://www.youtube.com/embed/a1AjdvNDda4]
2424
2525
## Scenarios in which users see consent prompts
2626

2727
Further prompts can be expected in various scenarios:
2828

29-
* The application has been configured to require assignment. Individual user consent is not currently supported for apps which require assignment; thus the permissions must be granted by an admin for the whole directory. If you configure an application to require assignment, be sure to also grant tenant-wide admin consent so that assigned user can sign-in.
29+
* The application has been configured to require assignment. Individual user consent isn't currently supported for apps that require assignment; thus the permissions must be granted by an admin for the whole directory. If you configure an application to require assignment, be sure to also grant tenant-wide admin consent so that assigned user can sign-in.
3030

3131
* The set of permissions required by the application has changed by the developer and needs to be granted again.
3232

33-
* The user who originally consented to the application was not an administrator, and now a different (non-admin) user is using the application for the first time.
33+
* The user who originally consented to the application wasn't an administrator, and now a different (non-admin) user is using the application for the first time.
3434

3535
* The user who originally consented to the application was an administrator, but they didn't consent on-behalf of the entire organization.
3636

3737
* The application is using [incremental and dynamic consent](../develop/permissions-consent-overview.md#consent) to request further permissions after consent was initially granted. Incremental and dynamic consent is often used when optional features of an application require permissions beyond those required for baseline functionality.
3838

3939
* Consent was revoked after being granted initially.
4040

41-
* The developer has configured the application to require a consent prompt every time it is used (note: this behavior isn't best practice).
41+
* The developer has configured the application to require a consent prompt every time it's used (note: this behavior isn't best practice).
4242

4343
> [!NOTE]
4444
> Following Microsoft's recommendations and best practices, many organizations have disabled or limited users' permission to grant consent to apps. If an application forces users to grant consent every time they sign in, most users will be blocked from using these applications even if an administrator grants tenant-wide admin consent. If you encounter an application which is requiring user consent even after admin consent has been granted, check with the app publisher to see if they have a setting or option to stop forcing user consent on every sign in.
@@ -54,7 +54,7 @@ To ensure the permissions granted for the application are up-to-date, you can co
5454
3. Select the application in question from the list.
5555
4. Under Security in the left-hand navigation, choose **Permissions**
5656
5. View the list of already granted permissions from the table on the Permissions page
57-
6. To view the requested permissions, click on the **Grant admin consent** button. (NOTE: This will open a consent prompt listing all of the requested permissions. Don't click accept on the consent prompt unless you are sure you want to grant tenant-wide admin consent.)
57+
6. To view the requested permissions, select the **Grant admin consent** button. (NOTE: This will open a consent prompt listing all of the requested permissions. Don't click accept on the consent prompt unless you're sure you want to grant tenant-wide admin consent.)
5858
7. Within the consent prompt, expand the listed permissions and compare with the table on the permissions page. If any are present in the consent prompt but not the permissions page, that permission has yet to be consented to. Unconsented permissions may be the cause for unexpected consent prompts showing for the application.
5959

6060
### View user assignment settings

0 commit comments

Comments
 (0)