SSO Authentication via Company Account through Microsoft for InControl2?

My company has SSO authentication through Microsoft that takes me to my company’s own login page after entering my employee email address. If I try to use this to authenticate to InControl2 I get to the point of authenticating to my company and then receive a message saying

”Approval required
This app requires your admin’s approval to:

  • Sign in and read user profile
  • Maintain access to data you have given it access to

Who has to approve this? Microsoft or my company?

it says your admin…