Unable to login to Sonarcloud.io with Azure Devops

praveenpallekaate · January 18, 2021, 9:57am

I’m trying to login to Sonarcloud.io by using Azure DevOps. On providing creds i get a popup saying “Need Admin Approval Sonarcloud needs permission to access…” in Microsoft login page. The AD team in my org has provided me access for SonarCloud.io but i still get the “Need Admin approval” message. Other colleagues are able to access with Azure devops access.
Currently i login to SonarCloud.io with a Github account.

Is there anything i can do to fix this?

mickaelcaro · January 21, 2021, 1:38pm

Hi @praveenpallekaate

Can you provide us a screenshot of that page please ? To see if that’s what we think about. Thanks in advance.

In the mean time, can one of your AD admin check what is the value of this “Admin consent request” setting : (Located in Active Directory -> Enterprise applications -> User settings)

Thanks.

praveenpallekaate · January 21, 2021, 2:59pm

Here is the screenshot from AD admin

Here is the screnshot of login error

mickaelcaro · January 21, 2021, 3:21pm

Are you guest in this Azure AD ?

praveenpallekaate · January 22, 2021, 8:20am

When i check my User Type in Azure AD it shows Member

mickaelcaro · January 22, 2021, 8:29am

Ok, and when you said : Other colleagues are able to access with Azure devops access., did you mean also SonarCloud ?

Is one of your AD admin already logged in on SonarCloud to allow this app to access your AD ?

praveenpallekaate · January 22, 2021, 9:26am

Yes, my team mates who has initially added is able to access SonarCloud.io with Org creds using Azure devops login.
I don’t know if the AD admin has logged in to SonarCloud

mickaelcaro · January 22, 2021, 9:32am

my team mates who has initially added is able to access SonarCloud.io with Org creds using Azure devops login.

Is he on the same AD and domain than you ?

praveenpallekaate · January 22, 2021, 9:45am

Yes he is. But he was added(given sonarcloud access) way before i was added. I checked his usertype in AD it’s Member.

mickaelcaro · January 22, 2021, 9:56am

An can you check also in “Admin consent requests” part that you don’t have any pending request concerning your user ?

praveenpallekaate · January 22, 2021, 10:38am

This is what the Azure AD admin sent me.

mickaelcaro · January 22, 2021, 1:53pm

Well i think that if no admin has ever signed in on SonarCloud, maybe the option you gave me the screenshot has been modified between your registration and the one of your colleagues ?

Can you check by either putting the first 2 option to “yes”, it’s working ?

Thanks.

Ryan_Adler · June 29, 2021, 12:36pm

We are having the same issue, except I don’t believe anyone else has ever used SonarCloud against our directory. What permissions are needed here? We will have to convince central IT to allow the application, which as you can imagine, is hard to do when it’s unclear what access it actually needs.
I also find it strange that it’s not possible to integrate SonarCloud into a separate AD from Azure DevOps, similar to what the self-hosted version can do.