When attempting to access Microsoft Teams through Okta federation, users are receiving the following error:

You can't access this application
Okta Microsoft Graph Client needs permission to access resources in your organization that only an admin can grant. Please ask an admin to grant permission to this app before you can use it.

 

• Office 365 (O365 / M365)
• Microsoft Teams / other Microsoft applications integrated with Okta
• Federation
• Okta Classic Engine

Microsoft Graph Client API credentials must be provided or re-authenticated.

To re-authenticate or provide credentials for the Microsoft Graph Client API:

1. Access the Okta Admin Console.
2. Click on Applications, and then click the affected Microsoft 365 application.
3. Click on the Sign On tab.
4. Click Edit and scroll down to the API Credentials section.
5. Next to the Advanced API Access option, click Authenticate with Microsoft Office 365 or Re-authenticate with Microsoft Office 365.
6. Enter the credentials of a global administrator for the Microsoft 365 tenant.
   • It is highly recommended that this be an account that is not federated with Okta. Such accounts are easily identified by having onmicrosoft.com in the domain (for example, <admin>@<company>.onmicrosoft.com)
7. Click Save.

Related References

• Provide Microsoft admin consent for Okta