"User is not authorized to connect in GLPI" with last Edge browser

[fabriceverkor]

We use singlesignon plugin with Azure App registration. After upgrade to Edge 123.0.2420.53 we have a strange behaviour of GLPI (10.0.10) and singlesignon plugin (1.3.3) :

• https://glpi.inf.biz.mysite.myfirm.com works fine
• but it fails by using DNS alias https://glpi.mysite.myfirm.com : "User is not authorized to connect in GLPI"

Both URLS works fine with Firefox, Chrome and Brave.

If I understand well, Microsoft authentication works fine, otherwise, we should get a Microsoft popup saying that it's wrong.

Any idea what's happening ? I there any debug mode to understand why GLPI reacts differently ? Thx

[fabriceverkor]

Some additional informations :

• It works fine with the IP
• It works fine when I sign out my Windows profile in Edge.
• When connected on failing URL thanks a local account and with Windows profile above signed in, the "Test Single Sign-On" button gives the output below.

BEGIN

getAccessToken: Array ( [error] => invalid_grant [error_description] => AADSTS54005: OAuth2 Authorization code was already redeemed, please retry with a new valid code or use an existing refresh token. Trace ID: 3068dfc7-d05e-4b94-a831-d1db6d2d1000 Correlation ID: 6586e8fe-e94c-4a50-8fc3-2e97f846039c Timestamp: 2024-03-27 10:35:03Z [error_codes] => Array ( [0] => 54005 )

[timestamp] => 2024-03-27 10:35:03Z
[trace_id] => 3068dfc7-d05e-4b94-a831-d1db6d2d1000
[correlation_id] => 6586e8fe-e94c-4a50-8fc3-2e97f846039c

)

END

[fabriceverkor]

Finally, it seems that the problem was solved with last Edge version : https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnote-stable-channel#version-1230242065-march-27-2024