Approving Brigg in Microsoft Entra ID

For Microsoft 365 administrators — approve Brigg once for the whole organisation, so nobody is stopped at «Need admin approval».

If your organisation does not let employees approve apps themselves, they are stopped at Need admin approval when they choose Sign in with Microsoft. A Microsoft 365 administrator then approves Brigg once, for the whole organisation. This page is for that administrator.

About the app

Brigg is a multi-tenant app registered in Brigg's own Entra tenant. You do not create an app registration of your own, and there is no endpoint to point one at — you only give consent to Brigg's app.

  • Application (client) ID: b909e0cb-8e39-438a-ac12-7d68f41036af
  • Redirect URI: https://api.brigg.app/me/calendar/oauth/callback/microsoft
  • Access type: delegated Microsoft Graph permissions only. Brigg always acts on behalf of the signed-in person and has no application permissions.

Permissions

Used when someone connects their account: User.Read, Calendars.Read, Contacts.Read, offline_access, openid, email and profile.

Optional — each person turns these on themselves in Brigg before they are used:

  • Mail.Send — Send email as you.
  • Calendars.ReadWrite — Create calendar invites as you.
  • Mail.ReadWrite — Read your email and write drafts.

You decide whether to approve the optional ones in advance. Approving a permission for the organisation does not switch it on for anyone: Brigg only uses what each person turned on.

A Global Administrator opens the link, sees exactly which permissions are being approved, and approves them for the whole tenant:

Afterwards Microsoft sends you back to Brigg's API address, which only shows a short technical receipt. The approval is now registered in Entra.

Approving from inside Brigg

An administrator with a Brigg account can instead open Personal settings › Connected accounts and choose Sign in with Microsoft. Microsoft's own consent screen then offers Consent on behalf of your organization. If you are not a member of the workspace yet, ask one of its administrators to invite you.

After the approval

Brigg shows up under Enterprise applications in your tenant. There you can set Assignment required and assign the group that should have access, as with any other app. Rolling it out with Intune needs nothing more from Brigg.

Connecting the calendar itself is described in Connecting your calendar.