Hi,

I have a problem with using office 365 api to authenticate user.
Once a normal user (not admin) try to login, it will show error:

Sorry, but were having trouble signing you in.
We received a bad request.

Additional technical information:
Correlation ID: 394eb8eb-4b16-4a9b-b3ea-054467c87e58
Timestamp: 2014-10-03 07:11:41Z
AADSTS50020: Calling principal cannot consent due to lack of permissions.

I did a research online, found this article, but it can't solve my problem.

http://blogs.msdn.com/b/exchangedev/archive/2014/06/05/managing-user-consent-for-applications-using-office-365-apis.aspx

I checked it and found that it allows User Consent.

Do you have other solution to solve this issue?

• Edited by lawrencewong Friday, October 03, 2014 8:02 AM
• Moved by George Hua Monday, October 06, 2014 2:52 AM Moved from apps for Office forum

If you use admin_consent, only admins can log in. So you don't want to use that flag if your intent is to let normal users consent for their own data.

What permissions have you configured in your app registration?

• Proposed as answer by Jandieg Friday, February 13, 2015 6:39 AM

Yep. That Azure permission requires an administrator.