This guide explains how to grant organization-wide permission (admin consent) for our application. This one-time approval by an administrator allows all users in your organization to sign in and use the integration without being asked for consent individually.
Prerequisites: You must have Global Administrator, Application Administrator, or Cloud Application Administrator permissions in your Microsoft Entra ID to perform these steps.
Your Tenant ID is a unique identifier for your organization's Microsoft Entra instance.
Sign in to the Microsoft Entra admin center with your administrator account.
On the main Overview page for your organization, you will find your Tenant ID.
Click the "copy" icon next to the ID to copy it to your clipboard.
Take the base URL provided below:
https://login.microsoftonline.com/{your-tenant-id}/adminconsent?client_id=ea2427a3-ac15-4865-89ca-800fa7af56df&scope=https://graph.microsoft.com/User.Read%20offline_access%20https://graph.microsoft.com/Mail.Send&redirect_uri=https://api.collegepipe.com/oauth2/tokens/microsoft
Replace the placeholder {your-tenant-id} with the Tenant ID you copied in Step 1.
Paste the complete, modified URL into your web browser and press Enter.
Sign in again with your Microsoft administrator account if prompted.
A "Permissions requested" window will appear. This window details the permissions our application needs to function correctly for your users. The requested permissions are:
Sign in and read user profile: To identify users and read basic profile information.
Send mail as the user: To enable specific features within our application.
Maintain access to data you have given it access to: To allow the application to work in the background without requiring the user to sign in every time.
Review the permissions and click Accept.
After you click "Accept," you will be redirected to a page that may show a simple error message, like the one below:
JSON
{"status":"ERROR","error":"Internal server error",...}
This is expected and normal behavior for this one-time setup process.
The consent has been successfully granted. This final page appears because the redirect link is designed for the regular user sign-in flow, not the admin consent flow. Microsoft server has already received the necessary confirmation in the background.
Thank you! Consent has now been granted for your entire organization. Your users can now sign in and begin using the application. If you have any questions, please contact our support team.