[Bug]: Standard: Require admin consent for applications (Prevent OAuth phishing) does not add allowed apps if policy already exists. #4031
Description
Required confirmations before submitting
- I can reproduce this issue on the latest released versions of both CIPP and CIPP-API.
- I have searched existing issues (both open and closed) to avoid duplicates.
- I am not requesting general support; this is an actual bug report.
Issue Description
If the standards has been deployed, it will not check to update allowed apps if they are updated in CIPP portal.
Specifically line 42 if ($State.permissionGrantPolicyIdsAssignedToDefaultUserRole -notin @('managePermissionGrantsForSelf.cipp-consent-policy')) {
If the default permission grant policy is already the cipp policy - it does not check to update allowed app IDs.
I have pushed an update in my repo that seems to have fixed - feel free to look:
Environment Type
Non-sponsored user
Front End Version
v7.5.3
Back End Version
v7.5.3
Relevant Logs / Stack Trace