This question directly follows this one. I have a native app wich has to display the groups the user is a member of (more precisely, I want to display the sharepoint site associated to the group).
It works well with any user of the tenant the app is registered on. But when I try to connect from another tenant, it only works with an admin account. Trying to connect with a user account gives me this error :
Correlation ID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx
Timestamp: 2017-04-19 08:32:24Z
AADSTS90093: Calling principal cannot consent due to lack of permissions.
The admin consent flow is never triggered. As stated in my previous post linked above, trying to add "prompt=admin_consent" as a query parameter returns this error :
"Duplicate query parameter 'prompt' in extraQueryParameters"
The samples and tutorials I've found so far were all aimed toward web apps and the questions that could have helped me on stackoverflow are strangely silent once this problem is mentionned link1 link2.
Is there even a way to trigger admin consent flow for a native app? Can it be done using ADAL or another way?
Changing the app from native to web is not an option, as I am only trying to add a new feature to an existing app.
So if the answer to the above question is 'no', is there any workaround? I'm open to any suggestions.