Skip to main content

Microsoft 365 for IT admins

Approve Origo for your organization in Microsoft Entra ID.

Origo is a multitenant app in Microsoft Entra ID. If your organization doesn't let users consent to apps themselves, teachers are asked for admin approval the first time they connect a Microsoft account. You can approve Origo for the whole organization in advance.

Check the app

  • App name: Origo
  • Application (client) ID: 60930bff-93cf-4cf9-b46c-df6e8887bf5e

Approve Origo

You need the Global Administrator, Cloud Application Administrator or Application Administrator role.

  1. Open this link and sign in with your admin account:

    https://login.microsoftonline.com/organizations/adminconsent?client_id=60930bff-93cf-4cf9-b46c-df6e8887bf5e&redirect_uri=https%3A%2F%2Forigolearn.com%2Fen-fi%2Fmicrosoft-complete
  2. Review the permissions and choose Accept.

Origo confirms when the approval is done.

In the Microsoft Entra admin center

  1. In the Microsoft Entra admin center, go to Enterprise applications and open Origo.
  2. Open Permissions and choose Grant admin consent for your organization.
  3. Review the permissions and choose Accept.

Origo is listed after someone in your organization has tried to connect a Microsoft account.

Approve a teacher's request

If your organization uses the admin consent workflow, a teacher can request approval. Go to Enterprise applications → Admin consent requests, open Origo and approve the request.

Permissions

Origo uses delegated, read-only permissions and only accesses data the signed-in user can open.

PermissionAPIPurpose
openid, profile, emailMicrosoft GraphSign in and identify the account
offline_accessMicrosoft GraphKeep the connection without signing in again
User.ReadMicrosoft GraphRead the account's basic profile
Files.Read.AllMicrosoft GraphRead files the user can open
MyFiles.ReadSharePointRead the user's OneDrive files
AllSites.ReadSharePointRead SharePoint sites the user can open

If teachers are still blocked

Check that you approved Origo with one of the roles above, in the same organization as the teacher's account. Admin consent doesn't apply to personal Microsoft accounts.

Remove access

To remove Origo's access for everyone, delete Origo under Enterprise applications in the Microsoft Entra admin center.