Microsoft Work Auth

It looks like your Microsoft authorize URL includes prompt=consent, which triggers the consent dialog after sign-in. In our tenant, that seems to kick off the admin approval/justification flow each time, even though tenant-wide admin consent is already in place. As a one-off test, removing prompt=consent from the URL allowed the integration to complete successfully.