# Microsoft Changes Oct 12 **URL:** \ **Category:** Pritunl VPN\ **Tags:** pritunl\ **Created:** [October 12, 2024, 9:58pm UTC](https://forum.pritunl.com/t/microsoft-changes-oct-12/2484 "2024-10-12T21:58:03Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![bwarren](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/b/c2a13f/32.png) [@bwarren](https://forum.pritunl.com/u/bwarren)\ **Post date:** [October 12, 2024, 9:58pm UTC](https://forum.pritunl.com/t/microsoft-changes-oct-12/2484/1 "2024-10-12T21:58:03Z")
I connected this morning, to 2 different Pritunl Enterprise servers on different sides of the US. Later in the day I got notification that any time anyone tried to connect, it was asking them to request permissions. Every time I connect with a global administrator account, it asks me to consent. I created a new registration and tried that - exactly same thing. Frantically trying to find some kind of fix for this. ---
**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\ **Post date:** [October 12, 2024, 11:04pm UTC](https://forum.pritunl.com/t/microsoft-changes-oct-12/2484/2 "2024-10-12T23:04:43Z")
The Azure OAuth 2.0 was activated today, this is expected. With the new OAuth all sign-ons require the additional prompt. ---
**Author:** ![bwarren](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/b/c2a13f/32.png) [@bwarren](https://forum.pritunl.com/u/bwarren)\ **Post date:** [October 12, 2024, 11:06pm UTC](https://forum.pritunl.com/t/microsoft-changes-oct-12/2484/3 "2024-10-12T23:06:00Z")
Are there any docs on what we need to do? My users can’t connect no matter what. They are getting prompted to request permissions, it’s being automatically granted, but they can’t connect. And I am being asked to consent on every login. ---
**Author:** ![bwarren](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/b/c2a13f/32.png) [@bwarren](https://forum.pritunl.com/u/bwarren)\ **Post date:** [October 12, 2024, 11:28pm UTC](https://forum.pritunl.com/t/microsoft-changes-oct-12/2484/4 "2024-10-12T23:28:17Z")
Deleted as it was wrong ---
**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\ **Post date:** [October 12, 2024, 11:37pm UTC](https://forum.pritunl.com/t/microsoft-changes-oct-12/2484/5 "2024-10-12T23:37:22Z")
I rolled back the OAuth API, I will add an option to manually select the new version instead. This was rolled back at 4:17PM, it was likely this that fixed the issue instead of that option. If you want to test the new API first run `sudo pritunl get app.sso_azure_region` to find what region is currently configured then run `sudo pritunl set app.sso_azure_region '"global2"'`. This can be reverted by changing it back to the original region. Microsoft will likely discontinue that API in the future. The only significant errors I see in the logs are showing `error_description=AADSTS65004:+User+declined+to+consent+to+access+the+app.` It’s possible the way you were automatically granting the prompt wasn’t working. ---
**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\ **Post date:** [October 12, 2024, 11:43pm UTC](https://forum.pritunl.com/t/microsoft-changes-oct-12/2484/6 "2024-10-12T23:43:14Z")
Also what Azure Region and Azure API Version in the top right settings did you have configured? ---
**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\ **Post date:** [October 13, 2024, 12:31am UTC](https://forum.pritunl.com/t/microsoft-changes-oct-12/2484/7 "2024-10-13T00:31:54Z")
With the API rolled back now I don’t see any noticeable correlation in the error count between the versions. I may still continue with the update sometime in the next few weeks. The `sudo pritunl set app.sso_azure_region '"global2"'` option will remain available to test the new API to find issues before it is rolled out. Additionally `sudo pritunl set app.sso_azure_region '"global1"'` has been added, this will force the OAuth v1 API. ---
**Author:** ![bwarren](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/b/c2a13f/32.png) [@bwarren](https://forum.pritunl.com/u/bwarren)\ **Post date:** [October 13, 2024, 1:44am UTC](https://forum.pritunl.com/t/microsoft-changes-oct-12/2484/8 "2024-10-13T01:44:40Z")
You’re right. I tried checking “Access tokens (used for implicit flows)” again and wait a few minutes, and it still connects fine. So that definitely wasn’t the fix. And the 4:17PM time frame was definitely right before I had tested it successfully. ---
**Author:** ![bwarren](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/b/c2a13f/32.png) [@bwarren](https://forum.pritunl.com/u/bwarren)\ **Post date:** [October 13, 2024, 1:45am UTC](https://forum.pritunl.com/t/microsoft-changes-oct-12/2484/9 "2024-10-13T01:45:25Z")
![image](https://forum-static.pritunl.com/original/1X/be043174b3f2c2dbe259d0ef28ee1623ff242192.png) ---
**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\ **Post date:** [October 13, 2024, 3:05am UTC](https://forum.pritunl.com/t/microsoft-changes-oct-12/2484/10 "2024-10-13T03:05:21Z")
You will need to run `sudo pritunl set app.sso_azure_region '"global1"'` to keep the server on the OAuth v1. Even on the weekend there were a sufficient number of Azure requests while v2 was active to see that there weren’t any widespread issues. The new v2 OAuth will eventually be active by default. ---
**Author:** ![bwarren](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/b/c2a13f/32.png) [@bwarren](https://forum.pritunl.com/u/bwarren)\ **Post date:** [October 14, 2024, 4:50pm UTC](https://forum.pritunl.com/t/microsoft-changes-oct-12/2484/11 "2024-10-14T16:50:44Z")
We’re on v1.30.3354.99 Is it important that we get this upgraded before we mess around with this? ---
**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\ **Post date:** [October 14, 2024, 11:07pm UTC](https://forum.pritunl.com/t/microsoft-changes-oct-12/2484/12 "2024-10-14T23:07:04Z")
I don’t think any changes have been made to the Azure single sign-on code between that release and the latest release. The primary changes in the v1.32 release is [**device authentication**](https://docs.pritunl.com/docs/device-authentication) and the inclusion of a Python 3.9 interpreter.