Skip to content

Commit f23ceb8

Browse files
authored
Clarify MSAL iOS app authentication instructions
1 parent ec00820 commit f23ceb8

File tree

1 file changed

+3
-5
lines changed

1 file changed

+3
-5
lines changed

support/entra/entra-id/app-integration/repeat-login-prompts-in-msal-ios-app.md

Lines changed: 3 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ This issue is typically caused by web browser configurations that do not allow c
2121

2222
The tutorial uses the MSAL to implement authentication. MSAL SDK facilitates authentication by automatically renewing tokens. It also enables single sign-on (SSO) between other apps on the device and manages user accounts.
2323

24-
For SSO to function correctly, tokens must be shared between apps. This requires a token cache or a broker application, such as Microsoft Authenticator for iOS. Interactive authentication in MSAL requires a web browser. On iOS, MSAL uses the system web browser by default for interactive authentication. This default setup supports SSO state sharing between apps.
24+
For SSO to function correctly, tokens must be shared between apps. To meet this requirement, you must use a token cache or a broker application, such as Microsoft Authenticator for iOS. Interactive authentication in MSAL requires a web browser. On iOS, MSAL uses the Safari system web browser by default for interactive authentication. This default setup supports SSO state sharing between apps.
2525

2626
However, if you customize the browser configuration for authentication, such as by using one of the following options, cookie sharing might not be enabled by default.
2727

@@ -34,20 +34,18 @@ However, if you customize the browser configuration for authentication, such as
3434

3535
To prevent repeated login prompts, you must allow cookie sharing when you customize the browser. To enable SSO and cookie sharing between MSAL and your iOS app, use one of the following solutions:
3636

37-
- Use `ASWebAuthenticationSession` and the iOS system Safari web browser (`UIApplication.shared.open`)
37+
- Use `ASWebAuthenticationSession` and Safari (`UIApplication.shared.open`)
3838

3939
- Use Case: Your app uses MSAL together with the default `ASWebAuthenticationSession` instance, and you open external links or logout flows in Safari.
4040

4141
- **Note:** `ASWebAuthenticationSession` is the recommended method for MSAL interactive authentication on iOS 12+. It's the only supported method on iOS 13+. This method is privacy-preserving and shares cookies with Safari. SSO works between MSAL and Safari because they share cookies through the system authentication session.
4242
- Use `WKWebView`
4343
- Use Case: You explicitly configure MSAL to use `WKWebView`, and your app also uses `WKWebView` for related workflows.
4444

45-
- **Note:** If you use `WKWebView` for a consistent experience within your app, notice that it's sandboxed and does not share session cookies with Safari or other apps. This supports SSO only within your app.
45+
- **Note:** You can use `WKWebView` for a consistent experience within your app. However, because it's sandboxed, `WKWebView` doesn't share session cookies with Safari or other apps. This condition limits support for SSO to within your app only.
4646

4747
For more information, see [Customizing webviews and browsers](/azure/active-directory/develop/customize-webviews).
4848

4949
[!INCLUDE [Third-party disclaimer](../../../includes/third-party-disclaimer.md)]
5050

5151
[!INCLUDE [Azure Help Support](../../../includes/azure-help-support.md)]
52-
53-

0 commit comments

Comments
 (0)