How to approve an app "Your site admin must authorize this app for the site"?

Question

Hello,

We are implementing an internal OAuth 2.0 (3LO) integration with Atlassian to allow our internal AI Teams Agent system via MCP to access Jira and Confluence on behalf of the user on this MVP version.

The OAuth flow works correctly until the authorization page, but when the user tries to authorize the application we receive the following message:

"Your site admin must authorize this app for the site 'netbiis.atlassian.net' before the app can access your account."

However, our site org admin cannot find any option to authorize or allow the app. We also use Atlassian Guard.

What we already verified:
The OAuth app is configured in Atlassian Developer Console
Distribution is set to "Sharing"
Permissions/scopes are configured
Callback URL is configured correctly
The app appears under **Atlassian Administration -> Connected apps -> Installed apps**

But there is **no option to approve/allow the app**.

We also checked Atlassian Guard / Data Security Policies but we could not find any rule related to third-party OAuth (3LO) apps.

Thank you.

Marc -Devoteam- · Answer

HI @Ayla Atilio Florscuk

Then I think it's best you admin raises an issue with Atlassian Support

Or the app could be removed and then what happens if you install the app again.

Ayla Atilio Florscuk_v0j95p · Answer

I created the app but I don't have an admin account. My leader, who is an org admin, looked through the admin page and although we can see the app on connected apps, the message "Your site admin must authorize this app for the site" still remains. Beside the app we can see "UPDATE", but it also doesn't work. Do you guys think it's better to create the app on his account? We though the problem was something related to Atlassian Guard.

Ayla Atilio Florscuk_v0j95p · Answer

I created the app but I don't have an admin account. My leader, who is an org admin, looked through the admin page and although we can see the app on connected apps, the message "Your site admin must authorize this app for the site" still remains. Beside the app we can see "UPDATE", but it also doesn't work. Do you guys think it's better to create the app on his account? We though the problem was something related to Atlassian Guard.