Azure AD, EasyAuth and IOS

Question

I have the sample app from here up and running:
https://learn.microsoft.com/en-us/azure/azure-signalr/signalr-quickstart-azure-functions-javascript

I note that this example uses Twitter as the Authentication Source - I was hoping to use Azure AD instead.

When I use Azure AD, it works well except from a phone running IOS. In this case it seems that the credentials are unavailable in the call to .auth/me .

This seems to line up with the 3 year old problem described here: https://learn.microsoft.com/en-us/answers/questions/365956/sso-in-ios-with-safari-browser.html

Can anyone advise if I have understood the situation correctly, and if so is there any possibility to explicitly set the same site cookie policy via EasyAuth?

Thanks,
David

Answer 1

Having investigated this some more, the issue is not related to cookie policies, but Safari's Intelligent Traffic Protection. Disabling this in the safari settings resolves the issue, but that doesn't seem like an acceptable solution for end users. More details can be found here: https://learn.microsoft.com/en-us/azure/active-directory/develop/reference-third-party-cookies-spas

The solution to keep on using EasyAuth in this manner seems to be make the static elements of the solution available from the same Azure Functions end point (or possibly to use Azure Static Websites) so that there is no third-party access involved.