This guide explains Microsoft's authentication and consent processes for connecting Valotalive with their online business applications (like Power BI, PowerPoint, etc.) using OAuth.
Understanding User and Admin Consent
Valotalive uses OAuth to securely connect with Microsoft applications. This connection requires consent, where the user grants Valotalive permission to access their application data.
In most organizational settings, permissions are managed via Entra ID (formerly Azure AD). Typically, an Entra ID Global Admin must approve the Valotalive application (known as an Enterprise application) before end-users can authenticate.
Please note: Activation of the Microsoft Teams app within Valotalive requires authorization from your company’s Entra ID Global Administrator.
Authentication Process Overview
The specific steps for authentication depend on how your organization manages OAuth consent in Entra ID. There are two main workflows:
Admin Initiated: The Entra ID Global Admin first approves the Valotalive application within Entra ID (A), and then completes the authorization process in the Valotalive Dashboard (B).
User Initiated: The end-user (or the Entra ID Global Admin) starts the process in Valotalive and can request admin approval.
We'll cover both workflows in detail below.
1. The Admin Initiated workflow
The Global Admin approves the Valotalive application through the Entra ID Gallery. This is where you can find and manage third-party integrations.
A. Entra ID Admin grants permissions in the Entra ID
Access the Entra ID Gallery
Sign in to Entra ID with Global Admin credentials.
Navigate to "Enterprise Applications" and click "+ New application".
Find the Valotalive Application
Search for "Valotalive" in the search bar.
Grant Permissions
Select the specific Valotalive application for integration. This will open its information page.
Click the blue button at the bottom of the information page to proceed to the Valotalive login page.
B. Valotalive Login (Admin Account)
The Global Admin completes the permission process on the Valotalive Apps page.
Login (Sign up) to Valotalive
Go to the Valotalive Dashboard: https://dashboard.valota.live/
If no account exists, click "Create an account" and log in.
(This account is only needed for the admin to grant consent.)
Choose and Authorize the App
Navigate to My account | Service Integrations.
Select the desired Microsoft application to authenticate.
Note: MS PowerPoint online and MS Excel online are grouped under “Microsoft 365 v2”.
Microsoft Login and Authorization
Click "Authorize"
You'll be redirected to the Microsoft Sign-in window.
Crucial: Ensure you are signed out of all other Microsoft applications in other browser tabs.
Use your Entra ID Global Admin credentials to sign in.
Consent Options
A prompt listing required permissions will appear.
You have the option to check "Consent on behalf of your organization."
This allows other Valotalive users to authenticate similar applications without requiring future admin approval from Entra ID.If the "Consent on behalf of your organization" button is absent, simply click "Accept," as the permissions are enabled via the checklist.
Authorization Successful
A confirmation message will appear in Valotalive.
The authorized Valotalive application will now be listed under Entra ID Enterprise Applications.
User Access
If organization-wide consent was granted, Valotalive users can now access their Microsoft app data and begin activating similar Valotalive apps.
Repeat steps 1-8 for any additional Valotalive application requiring connection.
Admin Logout
Once finished, the Entra ID admin can log out of Valotalive.
2. The user Initiated workflow
This process allows existing Valotalive users to activate individual Microsoft apps.
User Starts Activation
The user begins activating a Microsoft app (e.g., Power BI) within Valotalive.
Authorization and Potential Admin Review
Clicking "Authorize" to connect Valotalive with the chosen Microsoft account may lead to a message stating "Admin review needed"
Admin Consent Request
If prompted, the user can request admin review by clicking the link and providing a justification.
If user consent is restricted, the Entra ID admin will receive an email notification requesting approval.
Note: If you are prompted with "Need admin approval," the Entra ID admin must approve consent requests directly on the Entra ID site. The user-initiated request process allows the user to make this request.
Admin Reviews and Approves
The Entra ID admin is notified about the request via email, as shown in this example:
Clicking "Review request" directs the admin to the Entra ID Admin Consent Requests page for approval.
User Notification and Completion
After the admin approves the request, the user receives an email notification and can then proceed to authorize the application within Valotalive.
Learn more about the permissions Valotalive requests: MS Entra ID integrations & Valotalive on the Enterprise applications directory
Learn more about enabling admin consent workflow and user consent configuration from Learn.microsoft.com site: