Do you recognize this screen?

Sometimes you see an error code instead, such as AADSTS90094, AADSTS65001 or AADSTS900941. That's the same cause.

What is your role?

Why is this happening?

Claritalk connects to your calendar via Microsoft Graph. When you connect, Microsoft asks you for permission for a number of rights — just like with any other app you attach to your work account.

In Microsoft Entra ID (the former Azure AD), your organization determines whether users are allowed to give that permission themselves. There are three possible settings:

Which permissions does Claritalk request?

Only what is needed to make your calendar work. These are all delegated permissions: Claritalk works exclusively on behalf of the logged-in user and never sees more than that user already sees themselves. No organization-level permissions (application permissions) are requested.

No access is requested to SharePoint, OneDrive, Teams chats, or your organization's user directory.

For the user: how to resolve this

1. First, check which account you are logged in with

   At the top of the approval screen is an email address. Is there a private account or the account of another organization? Then log out of Microsoft, or use a private window in your browser, and try again with your work account.

2. Request approval if the button is there

   Some organizations turn on Microsoft's request process. In that case you'll see a field for a justification and a button to send the request on the screen. Briefly explain what you use Claritalk for and send — your administrator will receive the request directly.

3. No button? Send the email below to your IT department

   Without a request process, the screen ends at “Return to app” and nothing else happens. Use the ready-to-send email at the bottom of this article. It specifies exactly what your administrator needs to do and which permissions are involved.

4. Connect again once you have approval

   After your administrator approves, go to Profile › Marketplace in Claritalk and click connect again for Microsoft Outlook 365 Calendar. The approval screen will no longer appear and your calendar will show up within a few minutes.

For the IT administrator: three routes

You need the role of Global Administrator, Privileged Role Administrator or Cloud Application Administrator. Choose one of the three routes below — they all lead to a working connection.

Route 1

One-time consent for the entire organization

Fastest · ± 2 minutes

You grant consent once, after which no one in the organization will see the screen again. Your tenant settings remain unchanged.

1. Log in to Claritalk in a private window with your administrator account.

2. Open the Marketplace in your Claritalk profile and click connect for Microsoft Outlook 365 Calendar.

   https://app.claritalk.com/user/profile?setting=marketplace&search=outlook

3. On Microsoft's consent screen, check Consent on behalf of your organization and confirm with Accept.

4. Have users restart their connection. Done.

Route 2

Consent via the administrator URL

Without Claritalk account

Want to approve without logging into Claritalk? Then open the URL below with your administrator account. Simply fill in your own tenant ID in the place between the braces.

https://login.microsoftonline.com/{your-tenant-id}/adminconsent?client_id=551a3abc-65d8-4c22-a308-88f05a4c12bb

The app ID 551a3abc-65d8-4c22-a308-88f05a4c12bb is Claritalk's and is the same for every customer. Instead of your tenant ID, you can also use common or your domain name — what matters is which account you log in with. After a first connection attempt, you'll also find the app under Enterprise Applications by searching for Claritalk.

Route 3

Change the consent setting structurally

Applies to all apps

This resolves the notification for every app, not just Claritalk. Only makes sense if your organization deliberately wants users to grant limited permissions themselves.

1. Go to the Microsoft Entra admin center:

   Entra ID › Enterprise Applications › Consent and Permissions › User Consent Settings

   In the Azure portal: Azure Active Directory › Enterprise applications › Consent and permissions › User consent settings.

2. Select Allow user consent for apps from verified publishers, for selected permissions — or Let Microsoft manage consent settings.

3. Save, and have users restart their connection.

Note

With the verified publishers option, Calendars.ReadWrite is not always considered “limited impact”. If users still see the approval screen afterward, add that right to the selected permissions or use route 1.

Extra

Enable request process for users

This allows users to cleanly request approval instead of hitting a dead end screen. You decide who receives the requests.

Entra ID › Enterprise Applications › Consent and Permissions › Admin Consent Workflow

Verify that it worked

• In the Entra admin center, open Enterprise Applications, search for Claritalk and go to Permissions. The four calendar permissions are now listed under administrator consent.
• The user sees the status Connected in Claritalk under Profile › Marketplace for Microsoft Outlook 365 Calendar.
• Within a few minutes, the next calendar items will appear in Claritalk. Only items from the connected calendar will be fetched.

Is it still not working?

Consent is set up correctly, but the connection still fails? Then the cause is usually one of these points.

Privacy and revocation

• Claritalk uses only delegated permissions. In Claritalk, you only see what you already see in your own Outlook calendar.
• Access and refresh tokens are stored encrypted and are never shared with third parties.
• A user revokes their own connection via Profile › Marketplace in Claritalk, or via myapps.microsoft.com.
• An administrator revokes consent for the entire organization via Enterprise Applications › Claritalk › Permissions.

Ready-to-send email for your IT department

Copy the text below and send it to your IT contact. Simply fill in your own name and the link to this article.

Subject: approval needed for Claritalk (Microsoft 365 calendar integration)

Hi

I want to connect my Microsoft 365 calendar to Claritalk, the tool we use to prepare and summarize conversations. When I try to connect, I get a message from Microsoft saying administrator approval is needed. This is because of our tenant's consent setting, not a problem with the tool.

Claritalk requests the following delegated permissions, and nothing beyond:
- User.Read: name, email address and time zone of the logged-in user
- Calendars.ReadWrite: read calendar items to prepare conversations, and create or update items scheduled from Claritalk
- offline_access: keep the connection active without having to sign in every day
- openid: securely link the Microsoft identity to the Claritalk account

No access is requested to SharePoint, OneDrive, Teams chats or the organization's user directory. These are delegated permissions, so the tool never sees more than I can see myself.

Quickest solution: Sign in to Claritalk with your administrator account, open https://app.claritalk.com/user/profile?setting=marketplace&search=outlook, click connect for "Microsoft Outlook 365 Calendar" and check "Consent on behalf of your organization" on the Microsoft screen. This is a one-time action and applies to all colleagues afterward.

Prefer to approve without logging into Claritalk? You can also do it via this URL, with your tenant ID in the place between the braces:
https://login.microsoftonline.com/{tenant-id}/adminconsent?client_id=551a3abc-65d8-4c22-a308-88f05a4c12bb

The full article with all steps and alternatives is here: [link to this article]

Thank you
[your name]