Enabling Microsoft 365 for Jira on Tenant-Configured Allowlist - Application Access Policy
What’s happening?
Some customers are experiencing issues when attempting to log in to our app in Jira, resulting in the following screen:
This error message can be confusing, as it may appear even when the user has a Graph user account.
The underlying issue could be that our application, or the calls we make, are restricted within your Microsoft tenant due to a configured application access policy: Limiting application permissions to specific Exchange Online mailboxes - Microsoft Graph | Microsoft Learn.
This allowlist should not be mistaken for the Email Allowlist/Blocklist found in the exchange configuration: Manage allows and blocks in the Tenant Allow/Block List - Microsoft Defender for Office 365 | Microsoft Learn
How to check if there is a policy in place?
To proceed with the next steps, it is essential to ensure that you have the appropriate permissions within your tenant. Typically, your Microsoft Entra ID administrator should be able to confirm this.
First connect to your account using this command within Powershell:
Connect-ExchangeOnline -UserPrincipalName <youradministrator>Secondly use the following command in Powershell to check if there is a policy in place:
Get-OrganizationConfig | select -EWSApplicationAccessPolicy, EWSAllowList, EWSBlockListWhen an EwsAllowList is not configured and no application access policy is in place, it will appear as follows:
If not properly managed, the outcome could differ significantly. For instance, an access policy may include an EnforceAllowList that specifies permitted applications, or it may not include any applications at all, which would result in blocking all app-related access.
To include our app into this allowlist you simply need to add the following command:
Set-OrganizationConfig | select -EwsAllowList "yasoon/1.0 Microsoft365forJira/1.0"You are all set!