AzureAD / microsoft-authentication-library-for-dotnet

Microsoft Authentication Library (MSAL) for .NET
https://aka.ms/msal-net
MIT License
1.36k stars 330 forks source link

[Bug] "Work and school account" Option Doesn't Show on WAM Pop-up Window #4797

Open msJinLei opened 3 weeks ago

msJinLei commented 3 weeks ago

Library version used

4.63.0

.NET version

.netstandard 2.0

Scenario

PublicClient - desktop app

Is this a new or an existing app?

The app is in production, and I have upgraded to a new version of MSAL

Issue description and reproduction steps

Acquire token interactively with WAM broker

Relevant code snippets

No response

Expected behavior

WAM pop windows should contains "work and school account" options But actually not

image

I cannot reproduce the issue. May need the original reporter to provide the detailed debug logs.

See https://github.com/Azure/azure-powershell/issues/24964

Identity provider

Microsoft Entra ID (Work and School accounts and Personal Microsoft accounts)

Regression

No response

Solution and workarounds

No response

bgavrilMS commented 3 weeks ago

The issue here is that the account picker does not have a "Use a different account" + "Work and School account" option. Only the option "Use a different account" + "MSA" exists.

Possibly a problem with the account picker or some exotic configuration in Windows?

Issue seems to affect 1 customer.

bgavrilMS commented 3 weeks ago

Workaround exists as PS users have option to disable WAM.

bgavrilMS commented 3 weeks ago

@iulico-1 @ashok672 - apart from the issue itself, it would be good to start adding more troubleshooting to the public docs. I know WAM has been through a lot, so maybe it's just a matter of making more TSG guides available ?

There's a small troubleshooting section at https://aka.ms/msal-net-wam

iulico-1 commented 3 weeks ago

@msJinLei , what's the authority passed for the interactive request that only show MSA sign-in with new account UX ?

msJinLei commented 3 weeks ago

@msJinLei , what's the authority passed for the interactive request that only show MSA sign-in with new account UX ?

@iulico-1 The same as nonWAM flow "https://login.microsoftonline.com" for public cloud

/organizations