AzureAD / microsoft-authentication-library-common-for-objc

Common code used by both the Active Directory Authentication Library (ADAL) and the Microsoft Authentication Library (MSAL)
MIT License
33 stars 36 forks source link

Prt Recovery fix : Add recovery attempt count to prt object #1395

Closed Veena11 closed 3 months ago

Veena11 commented 4 months ago

Proposed changes

Add recovery attempt count to prt object to fix the ICM where iOS and macOS users seeing multiple prompts when SIF and MFA , both are enabled , but ESTS skips prt recovery for second request since we set the flag to skip prt recovery if prt recovered in the last 5 minutes.

Fix agreed upon by server and client teams is to allow upto 2 prt recovery calls per 5 minutes so that the prt recovery handles both SIF and MFA and customers wont be promoted quite often.

Fix : we will add a prt recovery attempt count and set the skipPrtRecovery flag only when the prt recovery has been attempted 2 times in last 5 minutes.

Type of change

Risk

Additional information