Skip to content

Commit f8a49e2

Browse files
authored
Update iOS app integration documentation
1 parent 1946ab9 commit f8a49e2

File tree

1 file changed

+10
-8
lines changed

1 file changed

+10
-8
lines changed

support/entra/entra-id/app-integration/repeat-login-prompts-in-msal-ios-app.md

Lines changed: 10 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -27,23 +27,25 @@ However, if you customize the browser configuration for authentication, such as
2727

2828
| **For iOS only** | **For iOS and macOS** |
2929
| --- | --- |
30-
| [ASWebAuthenticationSession](https://developer.apple.com/documentation/authenticationservices/aswebauthenticationsession?language=objc) <br> [SFAuthenticationSession](https://developer.apple.com/documentation/safariservices/sfauthenticationsession?language=objc) <br> [SFSafariViewController](https://developer.apple.com/documentation/safariservices/sfsafariviewcontroller?language=objc) | [WKWebView](https://developer.apple.com/documentation/webkit/wkwebview?language=objc) |
30+
| [SFAuthenticationSession](https://developer.apple.com/documentation/safariservices/sfauthenticationsession?language=objc) <br> [SFSafariViewController](https://developer.apple.com/documentation/safariservices/sfsafariviewcontroller?language=objc) | [ASWebAuthenticationSession](https://developer.apple.com/documentation/authenticationservices/aswebauthenticationsession?language=objc) <br> [WKWebView](https://developer.apple.com/documentation/webkit/wkwebview?language=objc) |
3131

3232
To customize the browser, you must allow cookie sharing to prevent repeated login prompts.
3333

3434
## Resolution
3535

36-
To enable cookie sharing and prevent repeated login prompts, use one of the following configurations:
36+
To enable SSO and cookie sharing between MSAL and your iOS app, use of the following solutions:
3737

38-
- **ASWebAuthenticationSession in MSAL** + **openURL in Safari browser** (the full Safari browser, not SafariViewController).
39-
- **SFSafariViewController in MSAL** + **SFSafariViewController in your app**.
40-
- **WKWebView in MSAL** + **WKWebView in your app**.
38+
- Use `ASWebAuthenticationSession` and system Safari browser (`UIApplication.shared.open`)
4139

42-
For more information, see [Customizing webviews and browsers](/azure/active-directory/develop/customize-webviews).
40+
- Use Case: Your app uses MSAL with the default `ASWebAuthenticationSession` instance, and you open external links or logout flows in the system Safari browser.
41+
- Note: `ASWebAuthenticationSession` is the recommended method for MSAL interactive auth on iOS 12+. It's the only supported method on iOS 13+. It is privacy-preserving and shares cookies with system Safari browser. SSO works between MSAL and system Safari browser because they share cookies through the system authentication session.
42+
- Use `WKWebView`
43+
- Use Case: You explicitly configure MSAL to use `WKWebView` and your app also uses `WKWebView` for related workflows.
44+
- Note: If you use `WKWebView` for a consistent experience within your app, note that it is sandboxed and does not share session cookies with Safari or other apps. This supports SSO only within your app.
4345

44-
> [!Note]
45-
> For Xamarin.iOS, several additional factors need to be considered, including enabling token caching and using Microsoft Authenticator. For more information, see [Xamarin.iOS MSAL considerations](/azure/active-directory/develop/msal-net-xamarin-ios-considerations).
46+
For more information, see [Customizing webviews and browsers](/azure/active-directory/develop/customize-webviews).
4647

48+
[!INCLUDE [Third-party disclaimer](../../../includes/third-party-disclaimer.md)]
4749
[!INCLUDE [Azure Help Support](../../../includes/azure-help-support.md)]
4850

4951

0 commit comments

Comments
 (0)