Azure B2C using another account, but session retains earlier logged in user account

Question

Azure B2C using another account, but session retains earlier logged in user account

Sowmithiran, Anand 0

Steps to repro the issue..

Click a sign in user flow in your B2C directory
complete the Login steps, including MFA if configured
Now, without closing the browser, visit the same "sign in" user flow link again
This time, it will show "Pick an account" dialog, select "Use another account" option
It will take you to next screen where you can enter email address to login as different user
In the next screen, it will display the username of the user logged in step # 2 above, not the newly entered user email or name in step 5

This is reproducible in the Azure B2C directory, with the Sign In only user flow, and also the "Sign up and Sign In" user flow. Please check this issue and fix it. Additional info, this happens especially when the WebView2 control is used in a Windows Forms application, and the userflow link is navigated to programmatically.

Hope this helps to troubleshoot this easier.

Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,526 Reputation points Moderator

2023-09-20T21:05:30.6033333+00:00

Hello @Sowmithiran, Anand , please Collect a network trace in the browser and send us the exported HAR file to azcommunity@microsoft.com with Subject Attn: Alfredo Revilla.
Sowmithiran, Anand 0 Reputation points

2023-09-21T13:08:10.9366667+00:00

Thanks for prompt response, as instructed, I have emailed the HAR file.
Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,526 Reputation points Moderator

2023-10-13T01:51:03.42+00:00

Hello @Sowmithiran, Anand , we're still working on this issue.
Sowmithiran, Anand 0 Reputation points

2023-10-18T07:42:33.13+00:00

Any updates on this issue ? Some of our customers are affected by this issue, it would be appreciated if you can get us a resolution soon.
Sowmithiran, Anand 0 Reputation points

2023-10-18T07:55:47.64+00:00

Hi @Alfredo Revilla - Upwork Top Talent | IAM SWE SWA , any updates on this issue? Some of our customers are affected by this issue, please provide a resolution.

1 answer

Your answer

Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,526 Reputation points Moderator

2023-09-20T21:05:30.6033333+00:00

Hello @Sowmithiran, Anand , please Collect a network trace in the browser and send us the exported HAR file to azcommunity@microsoft.com with Subject Attn: Alfredo Revilla.
Sowmithiran, Anand 0 Reputation points

2023-09-21T13:08:10.9366667+00:00

Thanks for prompt response, as instructed, I have emailed the HAR file.
Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,526 Reputation points Moderator

2023-10-13T01:51:03.42+00:00

Hello @Sowmithiran, Anand , we're still working on this issue.
Sowmithiran, Anand 0 Reputation points

2023-10-18T07:42:33.13+00:00

Any updates on this issue ? Some of our customers are affected by this issue, it would be appreciated if you can get us a resolution soon.
Sowmithiran, Anand 0 Reputation points

2023-10-18T07:55:47.64+00:00

Hi @Alfredo Revilla - Upwork Top Talent | IAM SWE SWA , any updates on this issue? Some of our customers are affected by this issue, please provide a resolution.

Answer 1

Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,526 Moderator

Hello @Sowmithiran, Anand , after revieweing your HAR we have found that the issue does not lie in Azure AD B2C or your Win Forms application: During the first login UserA signed in and established a logonsession within ADFS. This session is valid for 8hours (default WebSSOlifetime), till the user has performed a logout, closes the browser (assuming the feature "continue where you left off" is not enabled in browsers), or the application (Entra ID) requests a fresh login using the parameter &prompt=login or &wfresh=0&wauth=<password>.None of the aforementioned has been done, so when again redirecting to ADFS, it detects that you are already logged on with user A and performs SSO issuing you a new Token for User A. Please ensure one of the aforementioned conditions is met so that a new user gets signed in.

Let us know if you need additional assistance. If the answer was helpful, please accept it and rate it so that others facing a similar issue can easily find a solution.

Sowmithiran, Anand 0 Reputation points

2023-10-20T06:57:58.8566667+00:00

Thanks for providing the detailed explanation, that is clear and I already knew what was happening. However, since the GUI by B2C has given "use another account" option, the end-user will believe that he is logging in as "another" user only, and it must be "handled" by your software [even though a live active session already is present for user A, it must allow user B, since your system allowed via GUI to "login using another account" - Hope you understand the predicament. I cannot accept this as answer. It is a correct explanation of current system behavior, I appreciate that. However it is not desirable, nor logical to behave such way having given such a login UI. Pls work with base team to raise this as an "issue" so that they fix it in future release.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,526 Reputation points Moderator

2024-01-05T03:44:08.5466667+00:00

Hello @Sowmithiran, Anand , apologies for the late response. The "use another account" option is provided by Entra ID, not by B2C. You need to instruct ADFS to do a fresh login. For more information please take a loot at Active Directory Federation Services prompt=login parameter support.
Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,526 Reputation points Moderator

2024-01-09T19:28:29.14+00:00

Hello @Sowmithiran, Anand , checking in to see if you could read my latest comment or if you need more help.

Share via

Azure B2C using another account, but session retains earlier logged in user account

1 answer

Your answer