wrobins / cordova-plugin-msal

Use the newest Microsoft MSAL library in your Cordova-based project!
Apache License 2.0
23 stars 63 forks source link

device id is not passed to Azure AD with MS Intune (error we are getting error Set Up your device to get access) #80

Open nagendra-devireddy opened 3 years ago

nagendra-devireddy commented 3 years ago

Hi All,

I'm having some issues trying to authenticate my users via the Microsoft Intune app. The problem is that even though the users have complaint device on the Intune app, every time that they try to sign in they are still prompt to install the Intune app as if the app was completely unable to communicate with Intune and verify that the user actually has all the permissions required to go through.

We have verified back end azure logs, device id is missing in the request & it is hitting the conditional access policy and making the sign-in/device un-trusted device.

Please find configurations as below { authorities: [ { type: 'AAD', audience: 'AzureADMyOrg', authorityUrl: 'https://login.microsoftonline.com/TENENT_ID', default: true } ], scopes: ['CLIENT_ID/.default'], authorizationUserAgent: 'WEBVIEW' }

image

Thanks in Advance !!

trpraveenreddy commented 2 years ago

Hi @nagendra-devireddy Did you find any solution for this? We are running into similar issue? Thank you

nagendra-devireddy commented 2 years ago

Nope. we are planning to use https://ionic.io/products/auth-connect

muditpant-ally commented 2 years ago

Hi @nagendra-devireddy did using https://ionic.io/products/auth-connect solved your issue ?

jeffortdev commented 2 years ago

I think you need to use brokered authentication for the plugin to pass the deviceID.

bradical1379 commented 2 years ago

Try setting your authorityUrl to '' since you are using AAD.

https://github.com/wrobins/cordova-plugin-msal#authorityurl