So I have a C# client app UI. The UI needs to retrieve some data from Azure SQL. My Azure SQL has an Azure Active Directory Admin set/enabled.
The users who use the UI all should have access to Azure SQL (i.e. log in to SQL Server Management Studio) via Active Directory Integrated/MFA authentication.
I would like to the authentication experience be seamless. However, prompting/challenging the user with a login prompt would be just fine as well.
The problem is that when I run the UI, i get prompted for my login. I provide my id/email address, and if I provide them in a certain way, i get the MFA process going (i get a phone call to authenticate myself). However, upon getting authenticated, i see an immediate prompt that says the app "...needs permission to access resources in your organization that only an admin can grant. Please ask an admin to grant permission to this app before you can use it."
Note that I am essentially following this article.
Questions:
Is it possible to avoid this process which requires an Admin to approve?
Would it be acceptable for the UI itself to send an approval request (using the AAD Admin set under Azure SQL)?