5
votes

How can I implement admin consent flow for native app using O365 APIs of which permission scopes require admin consent?

1

1 Answers

0
votes

Admin Consent happens "out of band" from your normal authentication flow. To do this, you'll first need and Admin authenticate by going to:

https://login.microsoftonline.com/common/adminconsent?<yours params>.

You can provide this link within your app. Typically you would first attempt to authenticate them and present them with the Admin Consent option that process fails.

Once an Admin grants consent, users will be able to use OAUTH to authenticate via the standard endpoint:

https://login.microsoftonline.com/common/oauth2/authorize?<your params>