Overview
This article addresses three common IT setup requirements for Legistify: granting admin consent for Outlook email sync, handling the Windows SmartScreen warning during Vsigner installation, and configuring network IP restrictions to allow Legistify access within your corporate environment.
Outlook Email Sync — Admin Approval for OAuth Access
If users encounter a "Need Admin Approval" error when attempting to sync their Outlook inbox with Legistify, this is because Microsoft requires admin consent before a third-party application can access organisational mailboxes.
To resolve this, users should share the following details with their IT administrator.
Redirect URI
https://api.nango.dev/oauth/callback
Required Microsoft Graph Permissions
Mail.ReadWrite— Read and update mail itemsUser.Read— Read the signed-in user's profileMail.ReadBasic— Read basic mail propertiesMail.Send— Send mail on behalf of the userMail.Read— Read mail items
The IT administrator must grant admin consent for these permissions via Microsoft Entra ID (Azure AD) → Enterprise Applications or through the Microsoft 365 admin centre. Once consent is granted, users can complete the Outlook sync without encountering this error.
Vsigner Application — Windows SmartScreen Warning
When users download and install the Vsigner application (required for DSC token signing on Legistify), Windows may display a SmartScreen security warning that reads: "Windows protected your PC."
This warning appears because the installer has not yet reached the recognition threshold used by Windows Defender. The application is safe and is published by Verasys Limited.
Steps to Proceed
Click More info on the SmartScreen prompt.
Confirm that the publisher is listed as Verasys Limited.
Click Run anyway to continue.
A User Account Control (UAC) prompt will follow. Click Yes to allow the installation to complete.
For a full walkthrough of the Vsigner installation and DSC signing process, refer to the How to Sign a Document Using a DSC Token article.
Network IP Restrictions
If your organisation restricts outbound internet access by IP allowlist, users may find that Legistify is inaccessible from within your corporate network.
Legistify supports IP-based access restrictions, which means your IT team can configure your network to allow Legistify traffic only from your organisation's approved IP ranges. This ensures the platform remains accessible to your users while staying within your security perimeter.
To set this up, share your organisation's static IP address or IP range with your Legistify account manager or implementation team. The Legistify team will configure access restrictions on the platform side accordingly.
Conclusion
The configurations covered in this article are typically one-time setup steps carried out during onboarding. If you require assistance with any of these configurations, contact your Legistify implementation team with details of the specific error or restriction you are encountering.