Mobile SSO doesn't work on iOS (Specially for iPhone11 ) when using Microsoft Authenticator App for MFA

Malviya, Mridul Kumar 0

I incorporated Microsoft.Identity.Client API for user authentication. The user provided their credentials and received a one-time OTP.

The user then interacted with the Authenticator app by tapping on notifications. After tapping the notification, they were redirected to the app.

After entering the OTP, the user returned to the application, but the authentication process was reset on the application for iPhone 11.

The steps they use are:

1. Go to app.

Click login with AD account
Enter email address,
Enter the password
Tap on Authenticator App notification, switched to Authenticator
Tap Approve
Switch back to the app.

Then the screen got reset. Move to the B2C login screen again.

We also noticed the Auth Notification is not coming sometimes in both the iPhone 11 and iPhone 11

Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,436 Reputation points

2023-10-05T22:22:24.03+00:00

Hello @Malviya, Mridul Kumar , please share relevant source code.

Malviya, Mridul Kumar 0


 private void InitAuthenticationClient()
 {

	AppConfig.AuthenticationClient = PublicClientApplicationBuilder.Create(ClientId)
	.WithIosKeychainSecurityGroup(IosKeychainSecurityGroup)
                                        .WithB2CAuthority(AuthoritySignIn)
                                        .WithRedirectUri(RedriectURL)
                                        .Build();
}

if (AppConfig.AuthenticationClient == null)     
{                    
	InitAuthenticationClient();
}

IEnumerable<IAccount> accounts = await AppConfig.AuthenticationClient.GetAccountsAsync();                     	Microsoft.Identity.Client.AuthenticationResult result = null;                
if (accounts.Count() >= 1)       
{                         
	while (accounts.Any()) 
	{                             
		await AppConfig.AuthenticationClient.RemoveAsync(accounts.First());                             			   
		accounts = await AppConfig.AuthenticationClient.GetAccountsAsync();
	}    
}
                  		   	   	  
var result = await AppConfig.AuthenticationClient
                            .AcquireTokenInteractive(scopes)
                            .WithUseEmbeddedWebView(true)
                            .WithPrompt(Prompt.SelectAccount)
                            .WithParentActivityOrWindow(AppConfig.UIParent)
                            .ExecuteAsync();
if(result)
{
	//move to mainPage of Application
}
else
{
	//Show toast message
	//Move to login page
}

Share via

Mobile SSO doesn't work on iOS (Specially for iPhone11 ) when using Microsoft Authenticator App for MFA