Table of Contents
- Introduction
- Check Entra ID Configuration
- When user consent is allowed
- When using admin consent workflow
- When an Entra ID administrator consents on behalf of your organization
Introduction
When logging into Matlantis using Entra ID, you'll need to allow Matlantis' registered application on your Entra ID account. You don't need to create or register applications on your Entra ID yourself.
The method for granting access to Matlantis' Entra ID application varies depending on your Entra ID settings. This documentation outlines the specific Entra ID configuration steps for each case.
Check Entra ID Configuration
From Microsoft Entra admin center sidebar, check Enterprise apps > Consent and permissions > User consent settings.
The configuration method depends on the value of [User consent for applications].
When “Let Microsoft manage your consent settings”
No action is required from the Entra ID administrator.
Please refer to the [When user consent is allowed] section for details.
When “Allow user consent for apps from verified publishers, for selected permissions”
Check Enterprise apps > Consent and permissions > Permission classifications.
Please verify that low-risk permissions include email, openid, and profile as described above.
- If low-risk permissions include email, openid, profile
- No action is required from the Entra ID administrator.
- Please refer to the [When user consent is allowed] section for details.
- If low-risk permissions do not include email, openid, profile
- Please refer to the next section [When “Do not allow user consent” is selected].
When “Do not allow user consent”
Check Enterprise apps > Consent and permissions > Admin consent settings.
- If admin consent requests are [Yes]
- Please refer to the [When using admin consent workflow] section for details.
- If admin consent requests are [No]
- You need to invite the Entra ID administrator to Matlantis (temporarily), so please contact us.
- Please refer to the [When an Entra ID administrator consents on behalf of your organization] section for details.
When user consent is allowed
No action is required from the Entra ID administrator.
Matlantis users will see a screen like this when signing up. Please review the "This app would like to", and if there are no problems, click [Accept].
When using admin consent workflow
Matlantis users will see a screen like this when signing up. Please review the "This app would like to", and if there are no problems, enter a reason and click [Request approval].
For Entra ID administrators, please check Enterprise apps > Admin consent requests from the sidebar in Microsoft Entra admin center.
Select Matlantis and choose "Review permissions and grant consent" to perform admin consent.
Reference:
- Configure the admin consent workflow - Microsoft Entra ID
- Review and take action on admin consent requests - Microsoft Entra ID
When an Entra ID administrator consents on behalf of your organization
If admin consent requests are [No], an Entra ID administrator must consent on behalf of your organization.
- Invite an Entra ID administrator to Matlantis.
- The Entra ID administrator opens the signup URL provided in the invitation email and clicks on "Sign up with Microsoft."
- Review the "This app would like to", and if there are no problems, check the box next to "Consent on Behalf of Your Organization" and click [Accept].
- Afterward, if necessary, remove the Entra ID administrator's account from Matlantis.