jmprieur
commented
3 years ago @mmctest888 : I'm a bit confused. You're writing that you are using IWA, but your repro is using AcquireTokenSilent only. Also what does it mean for AcquireTokenSilent to ask for a password?
Do you mean you wrote something like this?
try
{
result = await app.AcquireTokenSilent(scopes, accounts.FirstOrDefault());
}
catch(MsalUIRequiredException ex)
{
result = await app.AcquireTokenByIntegratedWindowsAuth(scopes)
.WithClaims(ex.Claims)
.ExecuteAsyc()
}Did you see the following sample: https://github.com/Azure-Samples/active-directory-dotnet-iwa-v2? Also what is the error? can you please enable logs? Would that be a conditional access exception (device auth or something?).
mmctest888
Logs and Network traces Without logs or traces, it is unlikely that the team can investigate your issue. Capturing logs and network traces is described at https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/wiki/logging
Which Version of MSAL are you using ? 4.24
Platform net 4.6.2
What authentication flow has the issue?
Other? - please describe;
Is this a new or existing app? c. This is a new app or experiment
Repro
Expected behavior it should not ask for the password. ON THE BROWSER (EDGE AND CHROME WORKS WELL BUT IN WINFORMS FAILS)
Actual behavior it asks for the password.
Possible Solution
you are using this request and waiting for a federated user... which is incorrect in the case when using seamless SSO with pass sync https://login.microsoftonline.com/common/userrealm/ss@xx.com?api-version=1.0