Skip to content

Commit 010eb61

Browse files
authored
Clarify browser terminology in MSAL iOS guide
1 parent f23ceb8 commit 010eb61

File tree

1 file changed

+5
-6
lines changed

1 file changed

+5
-6
lines changed

support/entra/entra-id/app-integration/repeat-login-prompts-in-msal-ios-app.md

Lines changed: 5 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ This issue is typically caused by web browser configurations that do not allow c
2121

2222
The tutorial uses the MSAL to implement authentication. MSAL SDK facilitates authentication by automatically renewing tokens. It also enables single sign-on (SSO) between other apps on the device and manages user accounts.
2323

24-
For SSO to function correctly, tokens must be shared between apps. To meet this requirement, you must use a token cache or a broker application, such as Microsoft Authenticator for iOS. Interactive authentication in MSAL requires a web browser. On iOS, MSAL uses the Safari system web browser by default for interactive authentication. This default setup supports SSO state sharing between apps.
24+
For SSO to function correctly, tokens must be shared between apps. To meet this requirement, you must use a token cache or a broker application, such as Microsoft Authenticator for iOS. Interactive authentication in MSAL requires a web browser. On iOS, MSAL uses the Safari system browser by default for interactive authentication. This default setup supports SSO state sharing between apps.
2525

2626
However, if you customize the browser configuration for authentication, such as by using one of the following options, cookie sharing might not be enabled by default.
2727

@@ -34,15 +34,14 @@ However, if you customize the browser configuration for authentication, such as
3434

3535
To prevent repeated login prompts, you must allow cookie sharing when you customize the browser. To enable SSO and cookie sharing between MSAL and your iOS app, use one of the following solutions:
3636

37-
- Use `ASWebAuthenticationSession` and Safari (`UIApplication.shared.open`)
37+
- Use `ASWebAuthenticationSession` and Safari system browser (`UIApplication.shared.open`)
3838

39-
- Use Case: Your app uses MSAL together with the default `ASWebAuthenticationSession` instance, and you open external links or logout flows in Safari.
40-
41-
- **Note:** `ASWebAuthenticationSession` is the recommended method for MSAL interactive authentication on iOS 12+. It's the only supported method on iOS 13+. This method is privacy-preserving and shares cookies with Safari. SSO works between MSAL and Safari because they share cookies through the system authentication session.
39+
- Use Case: Your app uses MSAL together with the default `ASWebAuthenticationSession` instance, and you open external links or logout flows in Safari system browser.
40+
- **Note:** `ASWebAuthenticationSession` is the recommended method for MSAL interactive authentication on iOS 12+. It's the only supported method on iOS 13+. This method is privacy-preserving and shares cookies with system browser. SSO works between MSAL and Safari browser application because they share cookies through the system authentication session.
4241
- Use `WKWebView`
4342
- Use Case: You explicitly configure MSAL to use `WKWebView`, and your app also uses `WKWebView` for related workflows.
4443

45-
- **Note:** You can use `WKWebView` for a consistent experience within your app. However, because it's sandboxed, `WKWebView` doesn't share session cookies with Safari or other apps. This condition limits support for SSO to within your app only.
44+
- **Note:** You can use `WKWebView` for a consistent experience within your app. However, because it's sandboxed, `WKWebView` doesn't share session cookies with Safari system browser or other apps. This condition limits support for SSO to within your app only.
4645

4746
For more information, see [Customizing webviews and browsers](/azure/active-directory/develop/customize-webviews).
4847

0 commit comments

Comments
 (0)