Summary

Microsoft classifies the Microsoft Graph Read.User API endpoint as a low-risk permission by default. Your organization may have changed this. To use Gingr's SSO, users need this permission on.

Notice: If you are a regular user, you likely need your organization's IT team to review and set this up.

Before You Begin

To set permission classifications, you need:

• An Azure account with an active subscription.
• One of these roles: Global Administrator, Application Administrator, or Cloud Application Administrator.

Steps

1. Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator.
2. Go to Identity » Applications » Enterprise applications » Consent and permissions » Permission classifications.
3. Select the tab for the low risk permission classification you want to update.
4. Select Add permissions to classify another permission.
5. Select the Microsoft Graph API.
6. Select the User.Read delegated permission.

Related Articles

• Microsoft Single Sign-On Topic Outline
• Enable Microsoft Single Sign-On for User Groups How-To
• Log In with Microsoft Single Sign-On How-To