EasyEntra uses the standard Microsoft Graph REST API and Exchange Online REST API, meaning there is no need to trust third-party APIs. This makes the integration seamless, as no infrastructure changes are needed.
However, you do need to configure Consent, aka Admin Approval, to allow the Microsoft Graph REST API to impersonate user credentials. This is a standard requirement from Microsoft.
Granting consent does not give any permissions to access or manage your cloud infrastructure. Users still need their permissions (admin roles) to manage resources. Read this article for more information on API consent.
If a user tries to authenticate with the Microsoft Graph REST API before consent is granted, they’ll see the following message:
The easiest way to solve this is to use a Global Admin to grant Admin Consent. This is done by performing the MS Graph REST authentication in EasyEntra with a Global Admin and is a single-time operation.
When you authenticate with a Global Admin, you’ll be given the option to grant Admin Consent (Consent on behalf of your organization):
Once the Admin Consent is granted, your helpdesk team can authenticate with the MS Graph REST API.
If you prefer to grant Per-User Consent you’ll need to use PowerShell. You can use the script listed here to view and modify Admin Consent as well as Per-User Consent. Relying on Per-User Consent will require you to configure the consent whenever a user enters or exits your support team.
The EXO REST API does not currently implement Consent.
