11,701 questions
Users stuck in AAD authentication redirect loop when SWA is embedded in Sharepoint site
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(140.8, 12%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
C McC
0
Reputation points
I have configured AAD as a custom identity provider for my Static Web App via [https://learn.microsoft.com/en-us/azure/static-web-apps/authentication-custom?tabs=aad%2Cinvitations](https://learn.microsoft.com/en-us/azure/static-web-apps/authentication-custom?tabs=aad%2Cinvitations"Opens in a new window; external."). I have granted Admin Consent, but even though the application has User.read, my users appear to be stuck in an authentication redirect loop. The SWA is embedded in a Sharepoint Online site. Users are able to successfully authenticate and use the site when they visit it directly, but it enters a redirect loop when using it embedded.
Microsoft 365 and Office | SharePoint | For business | Windows
Azure Static Web Apps
Azure Static Web Apps
An Azure service that provides streamlined full-stack web app development.
1,178 questions
Microsoft Security | Microsoft Entra | Microsoft Entra ID
25,130 questions
{count} votes
-
Ed Harris 25 Reputation points2023-06-30T01:46:43.2366667+00:00 Is the SharePoint Server in O365, on prem, or in another cloud?
-
C McC 0 Reputation points
2023-06-30T14:14:37.18+00:00 It's in O365
-
C McC 0 Reputation points
2023-06-30T14:15:16.0966667+00:00 It's in O365
Edit: First comment didn't show up even after refresh, but now I can't delete the duplicate. -
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 20%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator2023-07-03T14:00:16.9233333+00:00 Hi @C McC ,
Thanks for reaching out.
It seems like your users are stuck in an authentication redirect loop when using the Static Web App embedded in a SharePoint Online site. This issue can occur when the authentication redirect URI is not set correctly.
Could you please confirm the redirect URL you are setting?
Login
https://<YOUR_SITE>/.auth/login/aad/callbackLogout
https://<YOUR_SITE>/.auth/logout/aad/callbackUser Detail https://<Your_site>/.auth/me
Thanks,
Shweta
-
C McC 0 Reputation points
2023-07-05T19:49:22.2866667+00:00 Two redirect URLs are set with the following schemes:
https://<SITE>/.auth/logout/aad/callbackandhttps://<SITE>/.auth/login/aad/callback. The front-channel logout URL is set tohttps://<SITE>/.auth/logout. Addinghttps://<SITE>/.auth/meas a redirect URL did not affect the problem. -
C McC 0 Reputation points
2023-07-12T14:09:54.8133333+00:00 @Shweta Mathur Any idea what I might be missing?
-
C McC 0 Reputation points
2023-08-04T20:01:26.32+00:00 @Shweta Mathur Some additional information that may be helpful- if I set the embed address to
https://<SITE>/.auth/me, it shows the below text:{ "clientPrincipal": null }When I go directly to the page (instead of through the Sharepoint embed), it shows the correct information and allows me to access the site normally.
Sign in to comment
Sign in to answer