PixieBrix Docs
CommunityTemplates
Ask or search…
⌃K
Links
Comment on page

Enabling Login with Microsoft

Application Consent

To authenticate with PixieBrix using "Login with Microsoft", consent must be enabled in Azure Entra ID.

Method #1: consent on behalf of your Azure organization as a Global Administrator

  1. 1.
    Sign into the PixieBrix Admin Console with Login with Microsoft
  2. 2.
    Select your Azure Account with a Global Administrator Role
  3. 3.
    On the permission prompt, check the “Consent on behalf of your organization” box
    image
    ​
  4. 4.
    Click Accept
For more information, see Microsoft Developer Documentation​

Method #2: enable user consent for Azure apps from verified publishers, for select permissions

  1. 1.
    Sign in to the Azure portal as a Global Administrator.
  2. 2.
    Select Azure Active Directory > Enterprise applications > Consent and permissions > User consent settings.
  3. 3.
    Under User consent for applications, select which consent setting you want to configure for all users.
  4. 4.
    Select Save to save your settings.

Troubleshooting

I received a “Need admin approval” message when using Login with Microsoft

This problem requires your IT (Microsoft Azure) Administrator to solve. Please contact your Azure administrator and provide a link to this documentation page. Our support team at [email protected] can provide assistance.
The "Need admin approval" message indicates that your IT (Microsoft Azure) Administrator needs to add PixieBrix to the allowlist for your organization.
​
The error is caused by Enterprise settings in Entra ID setting for “User consent for applications”:

Frequently Asked Questions

What scopes does PixieBrix request for Login with Microsoft?

PixieBrix requests the following scopes during authentication:
Scope
Description
​openid​
Sign users in
​profile​
View user's basic profile
​User.Read​
Sign in and read user profile
​email​
View user's email address

What’s the PixieBrix Azure Application Id?

The PixieBrix application id is: add06cfe-a38f-443f-9572-dd92ec7ab06b
Previous
Authentication
Next
Setting Up SAML/SSO
Last modified 20d ago