Oauth Plugin asks admin consent

Oleksi

Hi all,
We setup OAuth plugin and it works fine, but if we authenticate with Global Admin role.
If we try to authenticate with ordinary user, it always asks admin consent. We provided admin consent to API, but it didn't help.

We opened a ticket to Microsoft and they asked us to do the following:
Reach out the application developer to check how to: remove the consent parameter in the custom application.
Could you help us with this issue?
Thanks in advance

RBGE

Oleksi I'm sure there's an answer from Kevin somewhere for this, but in the meantime the workaround I used was to temporarily allow user consent to apps in Azure, then turn it back to admin approval required as soon as osTicket had been set up.

Oleksi

RBGE
Thanks for quick response. We noticed an autorzation URL has parameter &prompt=consent, and it may be a root.

KevinTheJedi

Oleksi

The prompt option will be removed in the next build of the plugin. Stay tuned!

Cheers.

Oleksi

KevinTheJedi
Thank you for update - we are looking forward for a new version!

Oleksi

Hi team,
Kindly clarify if this issue is resolved in the latest osTicket v1.17.3 release?
I read carefully release notes, but didn't find the answer.
Thank you in advance

KevinTheJedi

Oleksi

Yes, you need v1.17.3 and the latest build of the OAuth2 plugin.

Cheers.

Melville-Reid

Hi team,
I've just created a new instance using the latest version of OSticket and the Plugin however I'm still getting this error.

My other instances are fine, just this newly provisioned instance is having an issue.

KevinTheJedi

Melville-Reid

Make sure you are running v1.17.3 and the latest build of the OAuth2 plugin from our website.

Cheers.

Melville-Reid

KevinTheJedi As I said I'm running the latest, fresh from the website 5 days ago.
I had to do a workaround by elevating the email used for the helpdesk to global admin temporarily then sign in.
Even with the latest plugin and version the application registration came up as "Unverified"

Oleksi

Hi
thank you for response, we are going to plan upgrade

ramrajone

Melville-Reid
You can try adding to assign roles to support address as an Application Administrator

Oleksi

Melville-Reid
I could confirm - we upgraded to the latest 17.3 and the latest Oauth plugin - but issue still persists. We also apply this workaround and temporary elevate user to global admin, but do want to avoid it 🙁