You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: Learn what to do about various problems using SSL certificates with the MSAL.Objective-C library.
4
+
description: Learn what to do about various problems using TLS/SSL certificates with the MSAL.Objective-C library.
5
5
services: active-directory
6
6
documentationcenter: ''
7
7
author: mmacy
@@ -20,23 +20,23 @@ ms.reviewer: ''
20
20
ms.custom: aaddev
21
21
---
22
22
23
-
# How to: Troubleshoot MSAL for iOS and macOS SSL issues
23
+
# How to: Troubleshoot MSAL for iOS and macOS TLS/SSL issues
24
24
25
25
This article provides information to help you troubleshoot issues that you may come across while using the [Microsoft Authentication Library (MSAL) for iOS and macOS](reference-v2-libraries.md)
26
26
27
27
## Network issues
28
28
29
29
**Error -1200**: "An SSL error has occurred and a secure connection to the server can't be made."
30
30
31
-
This error means that the connection isn't secure. It occurs when a certificate is invalid. For more information, including which server is failing the SSL check, refer to `NSURLErrorFailingURLErrorKey` in the `userInfo` dictionary of the error object.
31
+
This error means that the connection isn't secure. It occurs when a certificate is invalid. For more information, including which server is failing the TLS check, refer to `NSURLErrorFailingURLErrorKey` in the `userInfo` dictionary of the error object.
32
32
33
33
This error is from Apple's networking library. A full list of NSURL error codes is in NSURLError.h in the macOS and iOS SDKs. For more details about this error, see [URL Loading System Error Codes](https://developer.apple.com/documentation/foundation/1508628-url_loading_system_error_codes?language=objc).
34
34
35
35
## Certificate issues
36
36
37
-
If the URL providing an invalid certificate connects to the server that you intend to use as part of the authentication flow, a good start to diagnosing the problem is to test the URL with a SSL validation service such as [Qualys SSL Labs Analyzer](https://www.ssllabs.com/ssltest/analyze.html). It tests the server against a wide array of scenarios and browsers and checks for many known vulnerabilities.
37
+
If the URL providing an invalid certificate connects to the server that you intend to use as part of the authentication flow, a good start to diagnosing the problem is to test the URL with an SSL validation service such as [SSL Server Test](https://www.ssllabs.com/ssltest/analyze.html). It tests the server against a wide array of scenarios and browsers and checks for many known vulnerabilities.
38
38
39
-
By default, Apple's new [App Transport Security (ATS)](https://developer.apple.com/library/archive/documentation/General/Reference/InfoPlistKeyReference/Articles/CocoaKeys.html#//apple_ref/doc/uid/TP40009251-SW35) feature applies more stringent security policies to apps that use SSL certificates. Some operating systems and web browsers have started enforcing some of these policies by default. For security reasons, we recommend you not disable ATS.
39
+
By default, Apple's new [App Transport Security (ATS)](https://developer.apple.com/library/archive/documentation/General/Reference/InfoPlistKeyReference/Articles/CocoaKeys.html#//apple_ref/doc/uid/TP40009251-SW35) feature applies more stringent security policies to apps that use TLS/SSL certificates. Some operating systems and web browsers have started enforcing some of these policies by default. For security reasons, we recommend you not disable ATS.
40
40
41
41
Certificates using SHA-1 hashes have known vulnerabilities. Most modern web browsers don't allow certificates with SHA-1 hashes.
Copy file name to clipboardExpand all lines: articles/active-directory/fundamentals/whats-new-archive.md
+153-1Lines changed: 153 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,7 +9,7 @@ ms.service: active-directory
9
9
ms.subservice: fundamentals
10
10
ms.workload: identity
11
11
ms.topic: conceptual
12
-
ms.date: 02/27/2020
12
+
ms.date: 03/25/2020
13
13
ms.author: mimart
14
14
ms.reviewer: dhanyahk
15
15
ms.custom: "it-pro, seo-update-azuread-jan"
@@ -30,6 +30,158 @@ The What's new in Azure Active Directory? release notes provide information abou
30
30
31
31
---
32
32
33
+
## September 2019
34
+
35
+
### Plan for change: Deprecation of the Power BI content packs
36
+
37
+
**Type:** Plan for change
38
+
**Service category:** Reporting
39
+
**Product capability:** Monitoring & Reporting
40
+
41
+
Starting on October 1, 2019, Power BI will begin to deprecate all content packs, including the Azure AD Power BI content pack. As an alternative to this content pack, you can use Azure AD Workbooks to gain insights into your Azure AD-related services. Additional workbooks are coming, including workbooks about Conditional Access policies in report-only mode, app consent-based insights, and more.
42
+
43
+
For more information about the workbooks, see [How to use Azure Monitor workbooks for Azure Active Directory reports](https://docs.microsoft.com/azure/active-directory/reports-monitoring/howto-use-azure-monitor-workbooks). For more information about the deprecation of the content packs, see the [Announcing Power BI template apps general availability](https://powerbi.microsoft.com/blog/announcing-power-bi-template-apps-general-availability/) blog post.
44
+
45
+
---
46
+
47
+
### My Profile is renaming and integrating with the Microsoft Office account page
48
+
49
+
**Type:** Plan for change
50
+
**Service category:** My Profile/Account
51
+
**Product capability:** Collaboration
52
+
53
+
Starting in October, the My Profile experience will become My Account. As part of that change, everywhere that currently says, **My Profile** will change to **My Account**. On top of the naming change and some design improvements, the updated experience will offer additional integration with the Microsoft Office account page. Specifically, you'll be able to access Office installations and subscriptions from the **Overview Account** page, along with Office-related contact preferences from the **Privacy** page.
54
+
55
+
For more information about the My Profile (preview) experience, see [My Profile (preview) portal overview](https://docs.microsoft.com/azure/active-directory/user-help/myprofile-portal-overview).
56
+
57
+
---
58
+
59
+
### Bulk manage groups and members using CSV files in the Azure AD portal (Public Preview)
60
+
61
+
**Type:** New feature
62
+
**Service category:** Group Management
63
+
**Product capability:** Collaboration
64
+
65
+
We're pleased to announce public preview availability of the bulk group management experiences in the Azure AD portal. You can now use a CSV file and the Azure AD portal to manage groups and member lists, including:
66
+
67
+
- Adding or removing members from a group.
68
+
69
+
- Downloading the list of groups from the directory.
70
+
71
+
- Downloading the list of group members for a specific group.
72
+
73
+
For more information, see [Bulk add members](https://docs.microsoft.com/azure/active-directory/users-groups-roles/groups-bulk-import-members), [Bulk remove members](https://docs.microsoft.com/azure/active-directory/users-groups-roles/groups-bulk-remove-members), [Bulk download members list](https://docs.microsoft.com/azure/active-directory/users-groups-roles/groups-bulk-download-members), and [Bulk download groups list](https://docs.microsoft.com/azure/active-directory/users-groups-roles/groups-bulk-download).
74
+
75
+
---
76
+
77
+
### Dynamic consent is now supported through a new admin consent endpoint
78
+
79
+
**Type:** New feature
80
+
**Service category:** Authentications (Logins)
81
+
**Product capability:** User Authentication
82
+
83
+
We've created a new admin consent endpoint to support dynamic consent, which is helpful for apps that want to use the dynamic consent model on the Microsoft Identity platform.
84
+
85
+
For more information about how to use this new endpoint, see [Using the admin consent endpoint](https://docs.microsoft.com/azure/active-directory/develop/v2-admin-consent).
86
+
87
+
---
88
+
89
+
### New Federated Apps available in Azure AD App gallery - September 2019
90
+
91
+
**Type:** New feature
92
+
**Service category:** Enterprise Apps
93
+
**Product capability:** 3rd Party Integration
94
+
95
+
In September 2019, we've added these 29 new apps with Federation support to the app gallery:
For more information about the apps, see [SaaS application integration with Azure Active Directory](https://aka.ms/appstutorial). For more information about listing your application in the Azure AD app gallery, see [List your application in the Azure Active Directory application gallery](https://aka.ms/azureadapprequest).
100
+
101
+
---
102
+
103
+
### New Azure AD Global Reader role
104
+
105
+
**Type:** New feature
106
+
**Service category:** RBAC
107
+
**Product capability:** Access Control
108
+
109
+
Starting on September 24, 2019, we're going to start rolling out a new Azure Active Directory (AD) role called Global Reader. This rollout will start with production and Global cloud customers (GCC), finishing up worldwide in October.
110
+
111
+
The Global Reader role is the read-only counterpart to Global Administrator. Users in this role can read settings and administrative information across Microsoft 365 services, but can't take management actions. We've created the Global Reader role to help reduce the number of Global Administrators in your organization. Because Global Administrator accounts are powerful and vulnerable to attack, we recommend that you have fewer than five Global Administrators. We recommend using the Global Reader role for planning, audits, or investigations. We also recommend using the Global Reader role in combination with other limited administrator roles, like Exchange Administrator, to help get work done without requiring the Global Administrator role.
112
+
113
+
The Global Reader role works with the new Microsoft 365 Admin Center, Exchange Admin Center, Teams Admin Center, Security Center, Compliance Center, Azure AD Admin Center, and the Device Management Admin Center.
114
+
115
+
>[!NOTE]
116
+
> At the start of public preview, the Global Reader role won't work with: SharePoint, Privileged Access Management, Customer Lockbox, sensitivity labels, Teams Lifecycle, Teams Reporting & Call Analytics, Teams IP Phone Device Management, and Teams App Catalog.
117
+
118
+
For more information, see [Administrator role permissions in Azure Active Directory](https://docs.microsoft.com/azure/active-directory/users-groups-roles/directory-assign-admin-roles).
119
+
120
+
---
121
+
122
+
### Access an on-premises Report Server from your Power BI Mobile app using Azure Active Directory Application Proxy
123
+
124
+
**Type:** New feature
125
+
**Service category:** App Proxy
126
+
**Product capability:** Access Control
127
+
128
+
New integration between the Power BI mobile app and Azure AD Application Proxy allows you to securely sign in to the Power BI mobile app and view any of your organization's reports hosted on the on-premises Power BI Report Server.
129
+
130
+
For information about the Power BI Mobile app, including where to download the app, see the [Power BI site](https://powerbi.microsoft.com/mobile/). For more information about how to set up the Power BI mobile app with Azure AD Application Proxy, see [Enable remote access to Power BI Mobile with Azure AD Application Proxy](https://docs.microsoft.com/azure/active-directory/manage-apps/application-proxy-integrate-with-power-bi).
131
+
132
+
---
133
+
134
+
### New version of the AzureADPreview PowerShell module is available
135
+
136
+
**Type:** Changed feature
137
+
**Service category:** Other
138
+
**Product capability:** Directory
139
+
140
+
New cmdlets were added to the AzureADPreview module, to help define and assign custom roles in Azure AD, including:
We've released an updated version of Azure AD Connect for auto-upgrade customers. This new version includes several new features, improvements, and bug fixes. For more information about this new version, see [Azure AD Connect: Version release history](https://docs.microsoft.com/azure/active-directory/hybrid/reference-connect-version-history#14250).
158
+
159
+
---
160
+
161
+
### Azure Multi-Factor Authentication (MFA) Server, version 8.0.2 is now available
If you're an existing customer, who activated MFA Server prior to July 1, 2019, you can now download the latest version of MFA Server (version 8.0.2). In this new version, we:
168
+
169
+
- Fixed an issue so when Azure AD sync changes a user from Disabled to Enabled, an email is sent to the user.
170
+
171
+
- Fixed an issue so customers can successfully upgrade, while continuing to use the Tags functionality.
172
+
173
+
- Added the Kosovo (+383) country code.
174
+
175
+
- Added one-time bypass audit logging to the MultiFactorAuthSvc.log.
176
+
177
+
- Improved performance for the Web Service SDK.
178
+
179
+
- Fixed other minor bugs.
180
+
181
+
Starting July 1, 2019, Microsoft stopped offering MFA Server for new deployments. New customers who require multi-factor authentication should use cloud-based Azure Multi-Factor Authentication. For more information, see [Planning a cloud-based Azure Multi-Factor Authentication deployment](https://docs.microsoft.com/azure/active-directory/authentication/howto-mfa-getstarted).
182
+
183
+
---
184
+
33
185
## August 2019
34
186
35
187
### Enhanced search, filtering, and sorting for groups is available in the Azure AD portal (Public Preview)
0 commit comments