Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,180 questions
Entra app not always directing to IDP login screen
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(99.2, 82%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERP%3C/text%3E%3C/svg%3E)
Roberto Pili
21
Reputation points
Hi All,
We have an issue regarding an application configured in Entra. The app, depending on the domain of the user trying to authN, redirect to a login screen of an external partner.
It all works fine if the user of this external partner, clears all browser information.
But the next time the user tries to AuthN by going to the application URL and providing it's emailadress, the redirect to the IDP login screen doesn't happen untill the browser info is deleted again. Instead the application throws an error stating login failure.
What could be the popential issue here?
Thanks for the feedback.
Gr
R
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(188.79999999999998, 26%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EN%3C/text%3E%3C/svg%3E)
Navya 9,160 Reputation points Microsoft Vendor2024-08-28T04:09:13.9833333+00:00 Thank you for posting this in Microsoft Q&A.
Based on the information provided, it seems like the issue could be related to the browser caching the previous authentication information and not redirecting to the correct IDP login screen.
Here are some potential causes:
1.When the user authenticates with the external partner's IDP, a cookie is set in the browser. This cookie might not be properly cleared when the user closes the browser or clears browser information. As a result, the application might be relying on the existing cookie, which is causing the login failure.
2.Similar to cookies, the application or IDP might be storing session information in the browser's local storage or session storage. This data could be persisting even after the user clears browser information, leading to the login failure.
3.The application or IDP might be caching authentication tokens or access tokens, which are not being properly invalidated when the user clears browser information. This could cause the application to attempt to reuse an invalid token, resulting in the login failure.
Are you using any specific authentication protocols (e.g., OAuth, SAML, OpenID Connect) with the external partner's IDP? Check the browser's developer tools (e.g., Chrome DevTools) to see if there are any errors or warnings related to cookies, sessions, or redirects.
Hope this helps. Do let us know if you any further queries.
Thanks,
Navya.
-
Navya 9,160 Reputation points Microsoft Vendor
2024-08-30T05:35:13.8566667+00:00 Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.
Sign in to comment
Sign in to answer