The plugin includes a Force re-consent option that controls whether Akeeba Ticket System sends the prompt=consent parameter to Microsoft Entra ID during the OAuth authorisation flow. It is enabled by default.
When Force re-consent is enabled, Entra ID is instructed to show its consent screen every time you click the button, even if you (or another admin) have already granted admin consent. This matches the behaviour of Gmail integration and is the safe default for first set-up.
When Force re-consent is disabled, the prompt=consent parameter is omitted. Entra ID will proceed silently if your tenant already has admin consent in place for the required permissions (IMAP.AccessAsUser.All, POP.AccessAsUser.All, SMTP.Send, and offline_access). ATS will still obtain a refresh token via the offline_access scope, so you will not need to re-authorise every hour when the access token expires.
If you see an Admin approval required message from Microsoft every time you attempt to authorise, and your tenant administrator has already granted tenant-wide admin consent for the application, set Force re-consent to No. The prompt=consent parameter that ATS sends by default is interpreted by Entra ID as a new consent request, triggering the approval workflow even when consent was previously granted.