4,151 questions
SSO Not Working In Desktop Teams and Mobile Teams and Same Working in Browser Teams
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 65%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EML%3C/text%3E%3C/svg%3E)
Marcelo Lorenzetti
20
Reputation points
Developing Teams App Which Includes SSO.
SSO Not working in Teams Desktop , Same Working in Teams in Broswer.
Tried solution provided in Below Reference (Logout and Login again)
Connect and configure an agent for Teams and Microsoft 365 Copilot - Microsoft Copilot Studio | Microsoft Learn
How to Fix this issue for the Desktop Teams?
Thanks.
Microsoft Teams | Development
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(112.00000000000001, 85%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENM%3C/text%3E%3C/svg%3E)
Nivedipa-MSFT 3,646 Reputation points Microsoft External Staff Moderator2025-03-07T10:02:26.29+00:00 @Marcelo Lorenzetti - Thank you for bringing this issue to our attention. We are checking this with engineering team, we will update you soon.
-
Marcelo Lorenzetti 20 Reputation points
2025-03-13T09:41:44.7566667+00:00 We are Waiting for your Response to proceed developing
Thanks -
Nivedipa-MSFT 3,646 Reputation points Microsoft External Staff Moderator
2025-03-17T08:42:17.9266667+00:00 @Marcelo Lorenzetti -
Could you please share how you have implemented auth in your tab? If you are using vanilla MSAL then their app will not be able to authenticate in the Teams Desktop and Mobile Clients. You need to follow one of these authentication strategies:- [Preferred] Nested app authentication: https://learn.microsoft.com/en-us/microsoftteams/platform/concepts/authentication/nested-authentication
- Tabs SSO (generating a Graph token via this mechanism require using server-side OBO): https://learn.microsoft.com/en-us/microsoftteams/platform/tabs/how-to/authentication/tab-sso-overview
- Popup auth (this doesn't provide a Single-Sign-On experience so users will often have to re-login to the app): https://learn.microsoft.com/en-us/microsoftteams/platform/tabs/how-to/authentication/auth-flow-tab
-
Marcelo Lorenzetti 20 Reputation points
2025-03-25T10:14:32.1266667+00:00 i am using below code for SSO
// MSALWrapper.ts import { PublicClientApplication, AuthenticationResult, Configuration, InteractionRequiredAuthError } from "@azure/msal-browser"; export class MSALWrapper { private msalConfig: Configuration; private msalInstance: PublicClientApplication; constructor(clientId: string, authority: string) { this.msalConfig = { auth: { clientId: clientId, authority: authority, }, cache: { cacheLocation: "localStorage", }, }; this.msalInstance = new PublicClientApplication(this.msalConfig); } public async handleLoggedInUser(scopes: string[], userEmail: string): Promise<AuthenticationResult | undefined> { await this.msalInstance.initialize(); let userAccount = undefined; const accounts = this.msalInstance.getAllAccounts(); if (accounts === undefined || accounts.length === 0) { console.log("No users are signed in"); return undefined; } else if (accounts.length > 1) { userAccount = this.msalInstance.getAccountByUsername(userEmail); } else { userAccount = accounts[0]; } if (userAccount !== undefined) { const accessTokenRequest = { scopes: scopes, account: userAccount }; return this.msalInstance.acquireTokenSilent(accessTokenRequest).then((response) => { return response; }).catch((errorinternal) => { console.log(errorinternal); return undefined; }); } return undefined; } public async acquireAccessToken(scopes: string[], userEmail: string): Promise<AuthenticationResult | undefined> { await this.msalInstance.initialize(); const accessTokenRequest = { scopes: scopes, loginHint: userEmail } return this.msalInstance.ssoSilent(accessTokenRequest).then((response) => { return response }).catch((silentError) => { console.log(silentError); if (silentError instanceof InteractionRequiredAuthError) { return this.msalInstance.loginPopup(accessTokenRequest).then((response) => { return response; } ).catch((error) => { console.log(error); return undefined; }); } return undefined; }) } } export default MSALWrapper; -
Nivedipa-MSFT 3,646 Reputation points Microsoft External Staff Moderator
2025-04-02T08:55:32.7433333+00:00 @Marcelo Lorenzetti - Have you followed any of the authentication strategies mentioned below?
- [Preferred] Nested app authentication: https://learn.microsoft.com/en-us/microsoftteams/platform/concepts/authentication/nested-authentication
- Tabs SSO (generating a Graph token via this mechanism require using server-side OBO): https://learn.microsoft.com/en-us/microsoftteams/platform/tabs/how-to/authentication/tab-sso-overview
- Popup auth (this doesn't provide a Single-Sign-On experience so users will often have to re-login to the app): https://learn.microsoft.com/en-us/microsoftteams/platform/tabs/how-to/authentication/auth-flow-tab
-
Nivedipa-MSFT 3,646 Reputation points Microsoft External Staff Moderator
2025-04-04T07:02:33.9166667+00:00 @Marcelo Lorenzetti - Could you please confirm which authentication strategies you have followed?
-
Marcelo Lorenzetti 20 Reputation points
2025-04-15T05:05:17.8733333+00:00 can not open any link from your reply..
i am using SSO using AAD
Sign in to comment
Sign in to answer