Thunderbird with Microsoft 365 shows AADSTS90094 “Admin consent required”
We are unable to add a corporate Microsoft 365 mailbox to Thunderbird. During OAuth sign-in, Microsoft shows “Need admin approval” and Entra logs: AADSTS90094: Admin consent is required for the permissions requested by this application. We have confirmed: - Thunderbird App ID: 9e5f94bc-e8a4-4e73-b8be-63364c29d753 - User assignment is not required - The tenant allows microsoft-user-default-allow-consent-apps - Thunderbird is included in that policy - No exclusion rule is configured - Conditional Access and sign-in risk are not causing the failure - A clean Thunderbird reinstall/profile still gives the same error Existing Thunderbird users still work, but some newly configured users cannot complete OAuth consent. Has anyone seen this recently, or is there a known Thunderbird/Microsoft 365 OAuth issue affecting new account setup?