search

AzureAD / microsoft-authentication-library-for-objc

Microsoft Authentication Library (MSAL) for iOS and macOS
http://aka.ms/aadv2
MIT License
261 stars 142 forks source link

MSAL SDK interface enhancement to take application downloaded user identity certificate to handle sign-In request. #1015

Open smudireddy opened 4 years ago

smudireddy commented 4 years ago

Requirement:

When device not managed by MDM solution or downloaded certificate is not exposed, if an application want to securely use the downloaded user-identity certificate from it's known server to use in handling the authentication challenges through MSAL in an embedded WebView provided by MSAL. The sign-in request handled inside the app and certificate not exposed to any other apps. Intended to protect the cert and use it's own cases so that it can renew when it got revoked or expired.

Currently this support available only if User identity certificate downloaded and pushed to system Key-chain in Browser from a server page or pushed by MDM solution.

jasoncoolmax commented 4 years ago

Thank you for the suggestion. We will take a look at it.