Our district is setup to use Microsoft 365 for authentication for all users. There has been no recent change in our configuration. However, yesterday our users are now being prompted to request for consent. We’ve followed the documentation for granting consent (https://help.sketchup.com/en/sketchup-education/setting-administrator). There are no exceptions in our configuration, all users should be able to use their Microsoft accounts for authentication to the app. However, users continue to be prompted to request consent. Has there been a change to our account, or is there something else I need to check to confirm our setup is correct? Please advise.
Hi @bwhelan, thanks for the post and sorry to hear that you are having difficulty with the SketchUp for Schools app. I am happy to work with you to get it resolved. It is possible we may have changed something but the rest of the team is not at the office yet so I can not ask them until they arrive. Once they are here, I will ask them if we have made any changes recently. In the meantime, can you confirm if the issue is domain wide or if it is just a few users?
Hi, Casey. I can confirm the issue is domain wide.
@bwhelan we did upgrade our microsoft auth yesterday to use the latest, most secure libraries from Microsoft which we didn’t expect to cause distruptions. I just want to confirm, after you noticed the issue, did you try logging in as a Admin and consenting on behalf of your organization?
We are experiencing this issue as well. Authentication stopped working yesterday.
Chris
@moorec can you provide details? Is the Microsoft popup displaying any reason for the failed authentication?
Yes, I have logged in as admin and consented on behalf of the organization. I have also granted consent for the organization through Entra ID Enterprise Apps as specified in your documentation.
This is the experience for all users:
- Navigate to SketchUp
- User is prompted for SSO, and chooses Microsoft.
- User enters username, clicks next.
- User enters password, clicks next.
- User completes MFA, if applicable.
- User is prompted for consent:
We also experiencing the same issue since today!
@CaseyG: Beside that, why does SketchUp need to have permission ‘read directory data’? With that permission they can read our whole addresslist (users, groups, apps) of our whole organisation?
And also the ‘Have full access permissions to user files’… Not necessary right?
Can anyone explain why?
@bwhelan @moorec and all, we’ve rolled back the changes that were causing the reconsent. Sorry for inconvenience. Please try again and let us know if you continue to have issues.
I tested and I was able to login (one of my coworkers tested as well and they were able to access it). I’ll let you know if others experience an issue.
I can confirm, we can now login as before. Is this a temporary fix, or can I communicate to my users that the issue is resolved?
You can considered it resolved.
1 Like
Hello, nov. 19, we are still having this issue. I am an IT admin and i applied admin consent but we still get this message for all our schoolboard users.
When you applied consent did you log into SketchUp for Schools as a Global or Application admin and select “Consent on behalf of your organization”? You should have seen this screen:
Hello Chris, i don’t get the “Consent on behalf of your organization”. This is what i get:
And the admin console we can see that “user.read” permission is granted by an administrator.
Hello, we finally pinpointed the issue to a Microsoft Entra console glitch. Thanks for your support.
2 Likes