starti.app
starti.app ManagerGetting started

Microsoft login asks for admin approval

What to do when starti.app Manager shows "Approval required" or "Ask your administrator to accept" during Microsoft login

How to handle the Microsoft admin-approval prompt

If you (or a colleague) try to log in to starti.app Manager with Microsoft and see a message like:

Approval required — Ask your administrator to accept this app

…this is not a problem with starti.app. The message comes from Microsoft. Your company's Microsoft 365 / Entra ID administrator has configured a rule that requires them to approve new sign-in apps before anyone in the company can use them.

Your Microsoft (Entra ID) tenant decides whether new apps need admin approval. starti.app cannot bypass this — only your IT admin can approve it.

What you can do

You have two quick options as an end-user:

  • Request approval from Microsoft. In the same sign-in window, click Request approval (or the similar button Microsoft shows) and write a short reason — for example: "I need this to manage our company app." Your IT admin will then receive a request they can approve. This is usually the fastest path.
  • Log in with Google or Apple — only if you have one tied to the same email. If you also have a Google or Apple account that uses the exact same email address as your starti.app user, you can sign in with that provider instead and skip Microsoft entirely.
    • Most companies that use Microsoft 365 don't issue Google logins, so this option often isn't available.
    • With Apple sign-in, do not choose Hide My Email — it creates a relay address that won't match your starti.app user.

If neither option works, forward the section below to whoever manages Microsoft 365 / Entra ID at your company.


For your IT administrator

To approve starti.app Manager for your organization in Microsoft Entra ID:

Open the Entra admin center

Go to entra.microsoft.com and sign in with an account that has the Cloud Application Administrator role (or higher, e.g. Privileged Role Administrator or Global Administrator). You also need to be a designated reviewer in the admin consent workflow.

Go to Entra ID → Enterprise apps, then under Activity select Admin consent requests.

Open the My Pending tab, find the request for starti.app Manager (it may be listed under the underlying OAuth app name), select it, then choose Approve.

If no request is pending, you can grant consent up-front:

  1. Go to Entra ID → Enterprise apps → All applications
  2. Search for and open starti.app Manager
  3. Under Security, select Permissions
  4. Review the requested permissions, then click Grant admin consent

starti.app Manager only requests basic profile information (name, email, profile picture). It does not read or modify any other data in your Microsoft 365 tenant.


Why does this happen?

Many organizations have a Microsoft Entra ID setting that blocks regular users from signing in to new apps without an admin's approval. This is a security feature, not a starti.app limitation. Once your IT admin approves starti.app Manager once, everyone in the company can log in without seeing the message again.


See also

On this page