Azure AD, EasyAuth and IOS

Question

question

DavidMuller-3159 asked Dec 13, '21 amanpreetsingh-msft commented Dec 22, '21

Azure AD, EasyAuth and IOS

I have the sample app from here up and running:
https://docs.microsoft.com/en-us/azure/azure-signalr/signalr-quickstart-azure-functions-javascript

I note that this example uses Twitter as the Authentication Source - I was hoping to use Azure AD instead.

When I use Azure AD, it works well except from a phone running IOS. In this case it seems that the credentials are unavailable in the call to .auth/me .

This seems to line up with the 3 year old problem described here: https://docs.microsoft.com/en-us/answers/questions/365956/sso-in-ios-with-safari-browser.html

Can anyone advise if I have understood the situation correctly, and if so is there any possibility to explicitly set the same site cookie policy via EasyAuth?

Thanks,
David

azure-ad-b2c azure-signalr-service

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2021-12-20T10:06:31.933Z

DavidMuller-3159 answered Dec 20, '21 amanpreetsingh-msft commented Dec 22, '21

Having investigated this some more, the issue is not related to cookie policies, but Safari's Intelligent Traffic Protection. Disabling this in the safari settings resolves the issue, but that doesn't seem like an acceptable solution for end users. More details can be found here: https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-third-party-cookies-spas

The solution to keep on using EasyAuth in this manner seems to be make the static elements of the solution available from the same Azure Functions end point (or possibly to use Azure Static Websites) so that there is no third-party access involved.

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

amanpreetsingh-msft · Dec 22, 2021 at 10:38 AM

Thank you for posting the update. Please "Accept your answer" as this will help others in the community as well.

0 ·

question