You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When a user authenticates, Azure Active Directory (Azure AD) sends the token to the app by using the redirect URI registered with the Azure AD application.
22
22
23
-
The MSAL requires that the redirect URI be registered with the Azure AD app in a specific format. MSAL uses a default redirect URI, if you don't specify one. The format is `msauth.[Your_Bundle_Id]://auth`.
23
+
The MSAL requires that the redirect URI is registered with the Azure AD app in a specific format. MSAL uses a default redirect URI, if you don't specify one. The format is `msauth.[Your_Bundle_Id]://auth`.
24
24
25
25
The default redirect URI format works for most apps and scenarios, including brokered authentication and system web view. Use the default format whenever possible.
26
26
27
27
However, you may need to change the redirect URI for advanced scenarios, as described in the following section.
28
28
29
29
## Scenarios that require a different redirect URI
30
30
31
-
### Cross-app single signon (SSO)
31
+
### Cross-app single sign-on (SSO)
32
32
33
-
For the Microsoft identity platform to share tokens across apps, each app needs to have the same client ID or application ID. This is the unique identifier provided when you registered your app in the portal (not the application bundle ID that you register per app with Apple).
33
+
For the Microsoft identity platform to share tokens across apps, each app needs to have the same client ID or application ID. The client ID is the unique identifier provided when you registered your app in the portal (not the application bundle ID that you register per app with Apple).
34
34
35
35
The redirect URIs need to be different for each iOS app. This allows the Microsoft identity service to uniquely identify different apps that share an application ID. Each application can have multiple redirect URIs registered in the Azure portal. Each app in your suite will have a different redirect URI. For example:
36
36
37
37
Given the following application registration in the Azure portal:
38
38
39
-
- Client ID: `ABCDE-12345` (this is a single client ID)
### Migrating from Microsoft Authentication Library to MSAL
47
47
48
-
When migrating code that used the Azure Active Directory Authentication Library (ADAL) to MSAL, you may already have a redirect URI configured for your app. You can continue using the same redirect URI as long as your ADAL app was configured to support brokered scenarios and your redirect URI satisfies the MSAL redirect URI format requirements.
48
+
When migrating code that used the Azure Active Directory Authentication Library (Microsoft Authentication Library) to MSAL, you may already have a redirect URI configured for your app. You can continue using the same redirect URI as long as your ADAL app was configured to support brokered scenarios and your redirect URI satisfies the MSAL redirect URI format requirements.
49
49
50
50
## MSAL redirect URI format requirements
51
51
52
52
- The MSAL redirect URI must be in the form `<scheme>://host`
53
53
54
54
Where `<scheme>` is a unique string that identifies your app. It's primarily based on the Bundle Identifier of your application to guarantee uniqueness. For example, if your app's Bundle ID is `com.contoso.myapp`, your redirect URI would be in the form: `msauth.com.contoso.myapp://auth`.
55
55
56
-
If you're migrating from ADAL, your redirect URI will likely have this format: `<scheme>://[Your_Bundle_Id]`, where `scheme` is a unique string. This format will continue to work when you use MSAL.
56
+
If you're migrating from ADAL, your redirect URI will likely have this format: `<scheme>://[Your_Bundle_Id]`, where `scheme` is a unique string. The format will continue to work when you use MSAL.
57
57
58
58
-`<scheme>` must be registered in your app's Info.plist under `CFBundleURLTypes > CFBundleURLSchemes`. In this example, Info.plist has been opened as source code:
0 commit comments