starred/CIPP

Fork 0

mirror of https://github.com/KelvinTegelaar/CIPP.git synced 2026-04-26 00:36:27 +03:00

[GH-ISSUE #4414] [Bug]: Standard Require admin consent for applications (Prevent OAuth phishing) not applying properly #2014

New issue

Closed

opened 2026-03-02 13:48:56 +03:00 by kerem · 3 comments

kerem commented

2026-03-02 13:48:56 +03:00

Owner

Originally created by @TUCU-KOConnor on GitHub (Jul 9, 2025).
Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/4414

Required confirmations before submitting

I can reproduce this issue on the latest released versions of both CIPP and CIPP-API.
I have searched existing issues (both open and closed) to avoid duplicates.
I am not requesting general support; this is an actual bug report.

Issue Description

I am unable to get this standard working, it seems to also allow an app though it mentions nothing about this in the description. The log shows the standard is applied, but always lists it as non-compliant.

Manual Settings Report result:

Automatic Remediation result:

Confirmation that the CIPP profile was applied in Entra:

Some additional findings related to the issue I am experiencing:
https://exigence.com.au/cipp-vulnerability-finding-a-third-party-risk-story/

Environment Type

Front End Version

8.1.1

Back End Version

8.1.1

Relevant Logs / Stack Trace

Originally created by @TUCU-KOConnor on GitHub (Jul 9, 2025). Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/4414 ### Required confirmations before submitting - [x] **I can reproduce this issue on the latest released versions** of both CIPP and CIPP-API. - [x] **I have searched existing issues** (both open and closed) to avoid duplicates. - [x] I am **not** requesting general support; this is an actual bug report. ### Issue Description I am unable to get this standard working, it seems to also allow an app though it mentions nothing about this in the description. The log shows the standard is applied, but always lists it as non-compliant. Manual Settings Report result: <img width="2249" height="290" alt="Image" src="https://github.com/user-attachments/assets/4cf3b0e9-b1d4-4a7e-9518-1b7df274816e" /> Automatic Remediation result: <img width="2249" height="294" alt="Image" src="https://github.com/user-attachments/assets/74ef2410-6333-479f-9e23-282f5675e684" /> Confirmation that the CIPP profile was applied in Entra: <img width="1112" height="432" alt="Image" src="https://github.com/user-attachments/assets/661763c2-d549-457c-bc83-18cffb342149" /> Some additional findings related to the issue I am experiencing: https://exigence.com.au/cipp-vulnerability-finding-a-third-party-risk-story/ ### Environment Type Sponsored (paying) user ### Front End Version 8.1.1 ### Back End Version 8.1.1 ### Relevant Logs / Stack Trace ```plaintext ```

kerem

2026-03-02 13:48:56 +03:00

closed this issue
added the
bug

unconfirmed-by-user

not-assigned
labels

kerem commented

2026-03-02 13:48:57 +03:00

Author

Owner

@github-actions[bot] commented on GitHub (Jul 9, 2025):

Thank you for reporting a potential bug. If you would like to work on this bug, please comment:

I would like to work on this please!

Thank you for helping us maintain the project!

@github-actions[bot] commented on GitHub (Jul 9, 2025): Thank you for reporting a potential bug. If you would like to work on this bug, please comment: > I would like to work on this please! Thank you for helping us maintain the project!

kerem commented

2026-03-02 13:48:57 +03:00

Author

Owner

@KelvinTegelaar commented on GitHub (Jul 9, 2025):

!support

@KelvinTegelaar commented on GitHub (Jul 9, 2025): !support

kerem commented

2026-03-02 13:48:57 +03:00

Author

Owner

@github-actions[bot] commented on GitHub (Jul 9, 2025):

Hello,

Thank you for reaching out! This report has been classified as a support request rather than a bug or feature request. To keep our development process focused, support requests are limited to paying users. This policy allows us to prioritize resources for those actively supporting CIPP, helping us maintain high-quality development and support.

Sponsors can contact our helpdesk directly via email for assistance with any issues or questions. For non-sponsor support, please refer to our documentation and community discussions—many questions have been answered there.

Did you get this notification in error? Reply with a screenshot of your sponsorship payment, and we’ll gladly reopen the request.

Thank you for your understanding,
The CIPP Team

@github-actions[bot] commented on GitHub (Jul 9, 2025): Hello, Thank you for reaching out! This report has been classified as a **support request** rather than a bug or feature request. To keep our development process focused, support requests are limited to paying users. This policy allows us to prioritize resources for those actively supporting CIPP, helping us maintain high-quality development and support. Sponsors can contact our helpdesk directly via email for assistance with any issues or questions. For non-sponsor support, please refer to our documentation and community discussions—many questions have been answered there. **Did you get this notification in error?** Reply with a screenshot of your sponsorship payment, and we’ll gladly reopen the request. _Thank you for your understanding,_ **The CIPP Team**

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/CIPP#2014

No description provided.

Rows
Columns