search

msintuneappsdk / ms-intune-app-sdk-ios

Intune App SDK for iOS enables data protection and mobile app management features in iOS mobile apps with Microsoft Intune
84 stars 25 forks source link

Unable to login second time once I logout from MSAL iOS. #389

Open asad-mehmood-venturediv opened 5 months ago

asad-mehmood-venturediv commented 5 months ago

Describe the bug: While Logging In with MSAL, after entering email address my App open Microsoft Authenticator App, I select my account there, It redirects me back on my app and opens web view. It asks for Credentials of Microsoft Account, I enter email and password and press continue. It lands me on a page having title Help us keep your device secure and have a Button with title _Get the app_ Even If Authenticator App is already installed. When I click on this button it takes me to Appstore and I open Microsoft Authenticator App from there and select my account in authenticator app, no redirection happens and I am stucked, I need to kill my App and need to login again, now it performs well and Login without opening web view.

To Reproduce Steps to reproduce the behavior:

  1. Create these conditional Access policies on Microsoft Entra Admin Portal BNY_DEV_CondAccess.xlsx

  2. Integrate MSAL and IntuneMAMSwift in your iOS Swift Project using this sample app by Microsoft https://github.com/msintuneappsdk/wagr

  3. Login to the App.

  4. Logout from App.

  5. Login Again to the app.

  6. It will open Authenticator app, select your account from there.

  7. It will redirect back to app and open the browser.

  8. Enter your same microsoft account credentials

  9. click next, it will land on the page as shown in picture above.

  10. click on Get App button (It should not show this button because I have already installed Microsoft Authenticator app).

  11. It will go on AppStore.

  12. Click on Open button at appstore to open the app.

  13. Select your account in the Microsoft Authenticator app

  14. No redirection happens, we need to kill our app to login again.

Expected behavior: It should not show Get App Button as mentioned in step 10 instead it should open Microsoft Authenticator automatically if it is installed. (Otherwise if it goes to Appstore and open app, it should redirect back to our app after doing it's authentication)

Screenshots and logs: IMG_3912 (1)

Smartphone (please complete the following information):

Intune App SDK for iOS (please complete the following information):

Additional context: Here is video for issue

https://github.com/msintuneappsdk/ms-intune-app-sdk-ios/assets/148774335/8626bfd4-c789-48af-9128-93252a2f7db0

ShruthiAchutha commented 2 months ago

Please let us know if this problem still impacts you.

asad-mehmood-vendian commented 2 months ago

Yes still we are getting and go to Microsoft Support, they asked to remove deregister and unenroll call on logout. But that is not obvious solution, SDK Delegates sometime takes 5 minutes to invoke.

jdevag commented 2 months ago

Thanks @ShruthiAchutha . Assigning this to @boachim to take this up.

boachim commented 2 months ago

@asad-mehmood-vendian Thank you for providing the details. Can you please attach the MSAL logs for your app? Of course, disable PII logging. https://learn.microsoft.com/en-us/entra/identity-platform/msal-logging-ios?tabs=objc

asad-mehmood-vendian commented 3 weeks ago

Our team had one on one session with microsoft support team, they asked not to Unenroll and Deregister user on logout will fix the issue. But that is not a good thing.

asad-mehmood-vendian commented 3 weeks ago

For now we fixed issue in this way. But still this is an issue.