Where is this 3rd party app request being sent to?

[thecomputerguy]

User is trying to add ChatGPT to O365 and I can't find where this request is going. I am a GA and I also have a mailbox for the org and I receive nothing ... screenshot below

 

[thecomputerguy]

@YeOldeStonecat @Sky-Knight

 

[Sky-Knight]

Two locations, both technically the same thing just through two UIs.

Https://entra.microsoft.com -> Entra ID -> Enterprise Apps -> Activity Section -> Admin Consent Requests

or you can do what I do...

Https://portal.azure.com -> Search for Enterprise Applications, expand Activity, click admin consent requests.


Note, opening the Microsoft Copilot app on my desktop, which is accessing the freely available online https://copilot.microsoft.com, and asking it "Where do I go to authorize a user requested application in Entra ID?" returns the correct instructions.

I realize it's not quite let me google that for you level, but it's pretty close. But you do have to know how to read that alert a bit, it's not blindly obvious unless you work in this space like I do.

 

[thecomputerguy]

Two locations, both technically the same thing just through two UIs.

Https://entra.microsoft.com -> Entra ID -> Enterprise Apps -> Activity Section -> Admin Consent Requests

or you can do what I do...

Https://portal.azure.com -> Search for Enterprise Applications, expand Activity, click admin consent requests.


Note, opening the Microsoft Copilot app on my desktop, which is accessing the freely available online https://copilot.microsoft.com, and asking it "Where do I go to authorize a user requested application in Entra ID?" returns the correct instructions.

I realize it's not quite let me google that for you level, but it's pretty close. But you do have to know how to read that alert a bit, it's not blindly obvious unless you work in this space like I do.

Thanks!

I did do my own research but I just wasn't able to phrase the question properly to get the answer I was looking for which is why I sent the picture.

 

[YeOldeStonecat]

Man I totally spaced out on this thread..saw it the first day, got distracted, forgot out it, thought I did answer already.

 

[thecomputerguy]

Man I totally spaced out on this thread..saw it the first day, got distracted, forgot out it, thought I did answer already.

All good ... always appreciate your help

 

[Sky-Knight]

Thanks!

I did do my own research but I just wasn't able to phrase the question properly to get the answer I was looking for which is why I sent the picture.

You sir, are doing just fine. This only happens when you're extremely smart and DISABLE the ability for users to authorize their own applications. That closes one of the largest currently exploited security weaknesses in M365 today...

Getting an authorized app out when it's malware is a PITA!