search

mozilla / platform-tilt

Tracking issues which disadvantage Firefox relative to first-party browsers on major software platforms.
https://mozilla.github.io/platform-tilt
191 stars 0 forks source link

Azure AD authentication only works with Edge user agents on mobile #31

Open philcoffeejunkie opened 8 months ago

philcoffeejunkie commented 8 months ago

Steps to reproduce:

  1. Try to sign in to a Azure AD/Entra protected service/app with a non-MS Edge browser (e.g. Fennec 119.1.0 on Android or Firefox 115.6.0esr on openSUSE) on a mobile device
  2. Error appears "You can't get there from here"
  3. Set user agent to Edge - in Firefox about:config option general.useragent.override (for example: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.")
  4. Re-try to login
  5. It works!

I suppose this is caused by a setting that IT departments are tricked into/suggested to set for "more security" when configuring Azure AD/Entra - aka dark patterns. As it obviously only relies on the user agent it doesn't provide any improved security and clearly was introduced to rule out other browsers and to increase the use of MS Edge.