microsoft-authentication-library-for-dotnet: [Bug] MSAL .NET versions < 4.5.0 do not support system browser on iOS 13

Edit to original post

If you are using the system browser with iOS 13, please update to MSAL.NET 4.5.0, which uses the required presentation context when authenticating on system browser with iOS 13.

If you are not using 4.5.0+, you will run into the issue listed below:

Starting with iOS 13, when authenticating using the system browser, MSAL .NET is required to provide a presentation context when using ASWebAuthenticationSession. Apple added multi-window support, and therefore they need to specifically know where to present the context (this is a breaking change).

In iOS 12, the AuthenticationSession API was iOS only and apps drew into a single window. However, now, with iPadiOS and macOS support, MSAL .NET will need to give the session a presentationContextProvider, and that presentationContextProvider will provide a window via the PresentationAnchor method.

Customer impact

Your app is impacted if all of the below are true:

You have a Xamarin iOS App, and
You are targeting iOS 13+, and
You use system browser (default in MSAL .NET) for interactive authentication
You are using a version lower then 4.5.0 of MSAL .NET

Workaround

Update to MSAL.NET 4.5.0, or higher, which includes the necessary fixes for handling the presentation context on iOS 13.

Or,

Use the embedded webview. Please see the documentation on enabling the embedded webview on Xamarin iOS

Example:

AuthenticationResult authResult;
authResult = app.AcquireTokenInteractively(scopes)
                .WithUseEmbeddedWebView(true)
                .ExecuteAsync();

Notable Concerns Regarding the Workaround to Use the Embedded Webview

Caution when targeting B2C using embedded webview and Google auth
Loss of SSO The great benefit of the system browser, and the reason why it is used by default in MSAL .NET, is the sharing of the SSO state with other applications and with web applications without needing a broker. More information provided here on SSO and the system browser

========

Original Post

Which Version of MSAL are you using ? MSAL 4.4.0 (also occurs in 4.3.1)

Platform Xamarin iOS

What authentication flow has the issue?

Desktop / Mobile
- [X ] Interactive
- Integrated Windows Auth
- Username Password
- Device code flow (browserless)
Web App
- Authorization code
- OBO
Web API
- OBO

Other? - please describe;

Is this a new or existing app? The app is in production, and works fine on physical iOS devices (on both iOS 12.x and 13.0). I have upgraded my iPhone emulator to iOS 13, and that is where the issue occurs. Everything still works fine in iOS 12.2 on the emulator.

Repro

                    AuthenticationResult ar = await App.PCA.AcquireTokenInteractive(App.Scopes)
                        .WithAccount(Utils.GetAccountByPolicy(accounts, App.PolicySignUpSignIn))
                        .WithParentActivityOrWindow(App.ParentActivityOrWindow)
                        .ExecuteAsync();

Expected behavior Authentication process initiates

Actual behavior Immediately returns “authentication_canceled”

Possible Solution

Additional context/ Logs / Screenshots

About this issue

Original URL
State: closed
Created 5 years ago
Reactions: 1
Comments: 84 (23 by maintainers)

Most upvoted comments

@mtanml thanks, that is the correct xamarin.ios for xcode11, we will try to reproduce it in the xamarin-ios side to try and get to the bottom of the issue.

mandel-macaque on Sep 25, 2019

Please note that using an Embedded Web View instead of the System Browser leads to a poorer experience in terms of SSO - i.e. the system browser will remember the account used to sign in across different applications and end-users do not need to retype their password. The embedded browser does not do this as far as I remember.

Also, note @ChristopherSt-Pierre’s observation - B2C configured with Google provider is prevented from working from the embedded browser.

Because of these reasons, we have consciously chosen to make the system browser the default option in MSAL.

I’d recommend logging in a few time with the embedded browser and seeing if the experience is good enough. Consider keeping the system browser on Android until we have a solution for this.

bgavrilMS on Sep 26, 2019

Hi,

I have the same problem, but on the Simulator and on my physical device.

Which Version of MSAL are you using ? MSAL 4.4.0 (also occurs in 4.3.1)

Platform Xamarin iOS

What authentication flow has the issue? Desktop / Mobile [X ] Interactive - against Azure AD Tennant

Is this a new or existing app? App is in development, early stage, but was previously working on iOS 12.4 on device and simulator.

Test devices iOS 13 Simulator - no MS Authenticator App installed iOS 13.1 on iPhone 7 - MS Authenticator App V 6.3.19 installed and multiple accounts added

Possible Solution or Workaround When I add .WithUseEmbeddedWebView(true) to AcquireTokenInteractive both device and simulator are working again. So the problem may have something to do with calling the system browser? Previously there was this popup message requesting permission to use microsoftonline.com to authenticate, which is no longer appearing.

 authResult = await PCA.AcquireTokenInteractive(Scopes)
                                      .WithUseEmbeddedWebView(true) 
                                      .WithAccount(accounts.FirstOrDefault())
                                      .WithPrompt(Prompt.SelectAccount)
                                      .ExecuteAsync();

On Visual Studio for Windows: “Help menu”, “About Microsoft Visual Studio” item.

Microsoft Visual Studio Community 2019 Version 16.3.1 VisualStudio.16.Release/16.3.1+29324.140 Microsoft .NET Framework Version 4.8.03761

Installed Version: Community

Visual C++ 2019 00435-60000-00000-AA416 Microsoft Visual C++ 2019

ADL Tools Service Provider 1.0 This package contains services used by Data Lake tools

ASP.NET and Web Tools 2019 16.3.283.64955 ASP.NET and Web Tools 2019

ASP.NET Web Frameworks and Tools 2019 16.3.283.64955 For additional information, visit https://www.asp.net/

Azure App Service Tools v3.0.0 16.3.283.64955 Azure App Service Tools v3.0.0

Azure Data Lake Node 1.0 This package contains the Data Lake integration nodes for Server Explorer.

Azure Data Lake Tools for Visual Studio 2.4.1000.0 Microsoft Azure Data Lake Tools for Visual Studio

Azure Functions and Web Jobs Tools 16.3.283.64955 Azure Functions and Web Jobs Tools

Azure Stream Analytics Tools for Visual Studio 2.4.1000.0 Microsoft Azure Stream Analytics Tools for Visual Studio

C# Tools 3.3.1-beta3-19461-02+2fd12c210e22f7d6245805c60340f6a34af6875b C# components used in the IDE. Depending on your project type and settings, a different version of the compiler may be used.

Common Azure Tools 1.10 Provides common services for use by Azure Mobile Services and Microsoft Azure Tools.

Extensibility Message Bus 1.2.0 (d16-2@8b56e20) Provides common messaging-based MEF services for loosely coupled Visual Studio extension components communication and integration.

Fabric.DiagnosticEvents 1.0 Fabric Diagnostic Events

IntelliCode Extension 1.0 IntelliCode Visual Studio Extension Detailed Info

Microsoft Azure HDInsight Azure Node 2.4.1000.0 HDInsight Node under Azure Node

Microsoft Azure Hive Query Language Service 2.4.1000.0 Language service for Hive query

Microsoft Azure Service Fabric Tools for Visual Studio 16.0 Microsoft Azure Service Fabric Tools for Visual Studio

Microsoft Azure Stream Analytics Language Service 2.4.1000.0 Language service for Azure Stream Analytics

Microsoft Azure Stream Analytics Node 1.0 Azure Stream Analytics Node under Azure Node

Microsoft Azure Tools 2.9 Microsoft Azure Tools for Microsoft Visual Studio 0x10 - v2.9.20816.1

Microsoft Continuous Delivery Tools for Visual Studio 0.4 Simplifying the configuration of Azure DevOps pipelines from within the Visual Studio IDE.

Microsoft JVM Debugger 1.0 Provides support for connecting the Visual Studio debugger to JDWP compatible Java Virtual Machines

Microsoft Library Manager 2.0.83+gbc8a4b23ec Install client-side libraries easily to any web project

Microsoft MI-Based Debugger 1.0 Provides support for connecting Visual Studio to MI compatible debuggers

Microsoft Visual C++ Wizards 1.0 Microsoft Visual C++ Wizards

Microsoft Visual Studio Tools for Containers 1.1 Develop, run, validate your ASP.NET Core applications in the target environment. F5 your application directly into a container with debugging, or CTRL + F5 to edit & refresh your app without having to rebuild the container.

Microsoft Visual Studio VC Package 1.0 Microsoft Visual Studio VC Package

Mono Debugging for Visual Studio 16.3.7 (9d260c5) Support for debugging Mono processes with Visual Studio.

Node.js Tools 1.5.10807.1 Commit Hash:4d3cf548113f5a53a02d83a877ee24e764b2cde4 Adds support for developing and debugging Node.js apps in Visual Studio

NuGet Package Manager 5.3.0 NuGet Package Manager in Visual Studio. For more information about NuGet, visit https://docs.nuget.org/

Office Developer Tools for Visual Studio 16.0.29217.00 Microsoft Office Developer Tools for Visual Studio

ProjectServicesPackage Extension 1.0 ProjectServicesPackage Visual Studio Extension Detailed Info

SQL Server Data Tools 16.0.61908.27190 Microsoft SQL Server Data Tools

ToolWindowHostedEditor 1.0 Hosting json editor into a tool window

TypeScript Tools 16.0.10821.2002 TypeScript Tools for Microsoft Visual Studio

Visual Basic Tools 3.3.1-beta3-19461-02+2fd12c210e22f7d6245805c60340f6a34af6875b Visual Basic components used in the IDE. Depending on your project type and settings, a different version of the compiler may be used.

Visual F# Tools 10.4 for F# 4.6 16.3.0-beta.19455.1+0422ff293bb2cc722fe5021b85ef50378a9af823 Microsoft Visual F# Tools 10.4 for F# 4.6

Visual Studio Code Debug Adapter Host Package 1.0 Interop layer for hosting Visual Studio Code debug adapters in Visual Studio

Visual Studio Tools for Containers 1.0 Visual Studio Tools for Containers

Visual Studio Tools for Kubernetes 1.0 Visual Studio Tools for Kubernetes

Visual Studio Tools for Unity 4.3.3.0 Visual Studio Tools for Unity

VisualStudio.Mac 1.0 Mac Extension for Visual Studio

Web Accessibility Checker 1.5.58 The easiest way to perform accessibility checks on any ASP.NET web application. Fully customizable and support all the major international accessibility standards.

Workflow Manager Tools 1.0 1.0 This package contains the necessary Visual Studio integration components for Workflow Manager.

Xamarin 16.3.0.274 (d16-3@06531f8) Visual Studio extension to enable development for Xamarin.iOS and Xamarin.Android.

Xamarin Designer 16.3.0.230 (remotes/origin/d16-3-xcode11@bbe518670) Visual Studio extension to enable Xamarin Designer tools in Visual Studio.

Xamarin Templates 16.3.565 (27e9746) Templates for building iOS, Android, and Windows apps with Xamarin and Xamarin.Forms.

Xamarin.Android SDK 10.0.0.43 (d16-3/8af1ca8) Xamarin.Android Reference Assemblies and MSBuild support. Mono: mono/mono/2019-06@7af64d1ebe9 Java.Interop: xamarin/java.interop/d16-3@5836f58 LibZipSharp: grendello/LibZipSharp/d16-3@71f4a94 LibZip: nih-at/libzip/rel-1-5-1@b95cf3f ProGuard: xamarin/proguard/master@905836d SQLite: xamarin/sqlite/3.27.1@8212a2d Xamarin.Android Tools: xamarin/xamarin-android-tools/d16-3@cb41333

Xamarin.iOS and Xamarin.Mac SDK 13.2.0.42 (5e8a208) Xamarin.iOS and Xamarin.Mac Reference Assemblies and MSBuild support.

On Visual Studio for Mac: “Visual Studio” menu, “About Visual Studio” item, “Show Details” button.

=== Visual Studio Community 2019 for Mac ===

Version 8.3 (build 1805) Installation UUID: a5347a83-fd65-48f3-ac10-99c82e59b239 GTK+ 2.24.23 (Raleigh theme) Xamarin.Mac 5.16.1.24 (d16-3 / 08809f5b)

Package version: 604000198

=== Mono Framework MDK ===

Runtime: Mono 6.4.0.198 (2019-06/fe64a4765e6) (64-bit) Package version: 604000198

=== NuGet ===

Version: 5.3.0.6192

=== .NET Core SDK ===

SDK: /usr/local/share/dotnet/sdk/3.0.100/Sdks SDK-Versionen: 3.0.100 2.1.701 2.1.505 MSBuild-SDKs: /Library/Frameworks/Mono.framework/Versions/6.4.0/lib/mono/msbuild/Current/bin/Sdks

=== .NET Core-Runtime ===

Laufzeit: /usr/local/share/dotnet/dotnet Laufzeitversionen: 3.0.0 2.1.13 2.1.12 2.1.9

=== Xamarin.Profiler ===

Version: 1.6.11.16 Speicherort: /Applications/Xamarin Profiler.app/Contents/MacOS/Xamarin Profiler

=== Updater ===

Version: 11

=== Xamarin.Android ===

Version: 10.0.0.43 (Visual Studio Community) Commit:xamarin-android/d16-3/8af1ca8 Android SDK: /Users/stephan/Library/Developer/Xamarin/android-sdk-macosx Unterstützte Android-Versionen: 8.1 (API-Ebene 27)

Version von SDK Tools: 26.1.1 Version der SDK-Plattformtools: 28.0.0 Version der SDK-Buildtools: 27.0.3

Buildinformationen: Mono: mono/mono/2019-06@7af64d1ebe9 Java.Interop: xamarin/java.interop/d16-3@5836f58 LibZipSharp: grendello/LibZipSharp/d16-3@71f4a94 LibZip: nih-at/libzip/rel-1-5-1@b95cf3f ProGuard: xamarin/proguard/master@905836d SQLite: xamarin/sqlite/3.27.1@8212a2d Xamarin.Android Tools: xamarin/xamarin-android-tools/d16-3@cb41333

=== Microsoft Mobile OpenJDK ===

Java SDK: /Users/stephan/Library/Developer/Xamarin/jdk/microsoft_dist_openjdk_1.8.0.25 1.8.0-25 Android Designer EPL-Code ist hier verfügbar: https://github.com/xamarin/AndroidDesigner.EPL

=== Android SDK Manager ===

Version: 1.4.0.65 Hash: c33b107 Branch: remotes/origin/d16-3 Build date: 2019-09-19 20:42:44 UTC

=== Android Device Manager ===

Version: 1.2.0.115 Hash: 724ea69 Branch: remotes/origin/d16-3 Build date: 2019-09-19 20:43:06 UTC

=== Apple Developer Tools ===

Xcode 11.0 (14936) Build 11A420a

=== Xamarin.Mac ===

Version: 6.2.0.42 (Visual Studio Community) Hash: 5e8a208b Branch: d16-3 Build date: 2019-09-17 14:19:30-0400

=== Xamarin.iOS ===

Version: 13.2.0.42 (Visual Studio Community) Hash: 5e8a208b Branch: d16-3 Build date: 2019-09-17 14:19:30-0400

=== Xamarin Designer ===

Version: 16.3.0.230 Hash: bbe518670 Branch: remotes/origin/d16-3-xcode11 Build date: 2019-09-17 18:39:30 UTC

=== Xamarin Inspector ===

Version: 1.4.3 Hash: db27525 Branch: 1.4-release Build date: Mon, 09 Jul 2018 21:20:18 GMT Client compatibility: 1

=== Build Information ===

Release ID: 803001805 Git revision: df50511ccb08d4d84a53939f1d7fc0b40cbb0ee1 Build date: 2019-09-20 16:10:55+00 Build branch: release-8.3 Xamarin extensions: da8d448cd65f2cc87c5e6dc7e2c2ca7b96d20c72

=== Operating System ===

Mac OS X 10.14.6 Darwin 18.7.0 Darwin Kernel Version 18.7.0 Tue Aug 20 16:57:14 PDT 2019 root:xnu-4903.271.2~2/RELEASE_X86_64 x86_64

Additional context/ Logs / Screenshots

I have not tried to remove the Authenticator App as suggested here: https://github.com/AzureAD/microsoft-authentication-library-for-objc/issues/698

If you need additional information please advise how to obtain them.

stephan14x on Sep 25, 2019

Tracking the typeload exception here: https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/issues/1449

bgavrilMS on Oct 16, 2019

@bgavrilMS @jennyf19 yes I agree. Let’s open a different one (this one is fixed)

jmprieur on Oct 16, 2019

Thanks for confirming @WilliamWatterson86, now for the fun part of hunting down obscure Xamarin build bugs 😃

bgavrilMS on Oct 16, 2019

@mtanml @andresbj16 @zachgreencbt @rulasg @RhomGit @krudraiah @SamuelDebruyn @ChristopherSt-Pierre @uarcho @stephan14x @WilliamWatterson86

Fix included in the 4.5.0 release.

jennyf19 on Oct 16, 2019

@WilliamWatterson86 yes…we had some issues w/AzureDevOps late last week and needed to get an ADAL build out yesterday. Will update here when the MSAL release happens.

jennyf19 on Oct 15, 2019

Great news!

Thanks.

mehamm on Oct 9, 2019

@mehamm We are looking to release this on Friday (10/11) end of day (PST).

jennyf19 on Oct 9, 2019

Special thanks also to @jennyf19 and @jmprieur for all your work on MSAL (including the documentation) over the last couple of years. You’ve done a great job.

@RhomGit … @jmprieur, myself, and our entire team appreciate the feedback! Thank you.

jennyf19 on Oct 3, 2019

Sigh, I am happy to see an already existing workaround for this library, thanks @stephan14x Releasing our latest build to the App store has been a nightmare thanks to iOS13 breaking so many libraries.

Special thanks also to @jennyf19 and @jmprieur for all your work on MSAL (including the documentation) over the last couple of years. You’ve done a great job.

RhomGit on Oct 3, 2019

@SamuelDebruyn Thanks for adding on here. We need to implement a presentation context w/iOS 13 when using system browser. We are in the process of making the changes necessary in MSAL.NET. This thread will be updated accordingly.

jennyf19 on Oct 2, 2019

@bgavrilMS @ChristopherSt-Pierre I documented this in our wiki…embedded webview will not work for google w/b2clogin.com. only if using login.microsoftonline.com…b2clogin.com is not on their allow list.

jennyf19 on Sep 26, 2019

Adding .WithUseEmbeddedWebView(true) on the AcquireTokenInteractive call works. Now our code, @lperezj too, code is working on iOS 13 Emulator. 😃

rulasg on Sep 26, 2019

@jennyf19 email is on its way

stephan14x on Sep 25, 2019

Hello,

Can you please provide the full information of your xamarin.iOS installation, would be good to know if this is happening with a package that support xcode11 or with an older one.

The easiest way to get exact version information:

On Visual Studio for Mac: “Visual Studio” menu, “About Visual Studio” item, “Show Details” button.

On Visual Studio for Windows: “Help menu”, “About Microsoft Visual Studio” item.

Then copy/paste the version information (you can use the “Copy Information” button).

The Xcode version information will also be helpful since we have had several releases from Apple. (GM, GM2 or Xcode11 final).

Visual Studio Enterprise 2019 for Mac Version 8.3 (build 1805) Installation UUID: 0c81f74b-067e-4e52-a203-67ba5242d3de GTK+ 2.24.23 (Raleigh theme) Xamarin.Mac 5.16.1.24 (d16-3 / 08809f5b)

Package version: 604000198

Mono Framework MDK Runtime: Mono 6.4.0.198 (2019-06/fe64a4765e6) (64-bit) Package version: 604000198

NuGet Versión: 5.3.0.6192

SDK de .NET Core SDK: /usr/local/share/dotnet/sdk/3.0.100/Sdks Versiones del SDK: 3.0.100 2.1.701 SDK de MSBuild: /Library/Frameworks/Mono.framework/Versions/6.4.0/lib/mono/msbuild/Current/bin/Sdks

.NET Core Runtime Runtime: /usr/local/share/dotnet/dotnet Versiones de tiempo de ejecución: 3.0.0 2.1.13 2.1.12

Xamarin.Profiler Versión: 1.6.12.26 Ubicación: /Applications/Xamarin Profiler.app/Contents/MacOS/Xamarin Profiler

Updater Versión: 11

Apple Developer Tools Xcode 11.0 (14936) Build 11A420a

Xamarin.Mac Xamarin.Mac not installed. Can’t find /Library/Frameworks/Xamarin.Mac.framework/Versions/Current/Version.

Xamarin.iOS Version: 13.2.0.42 (Visual Studio Enterprise) Hash: 5e8a208b Branch: d16-3 Build date: 2019-09-17 14:19:30-0400

Xamarin Designer Version: 16.3.0.230 Hash: bbe518670 Branch: remotes/origin/d16-3-xcode11 Build date: 2019-09-17 18:39:30 UTC

Xamarin.Android Versión: 10.0.0.43 (Visual Studio Enterprise) Confirmación: xamarin-android/d16-3/8af1ca8 Android SDK: /Users/aardila/Library/Developer/Xamarin/android-sdk-macosx Versiones de Android admitidas: 8.0 (nivel de API 26)

Versión de SDK Tools: 26.1.1 Versión de las herramientas de plataforma del SDK: 29.0.2 Versión de las herramientas de compilación del SDK: 28.0.3

Información de compilación: Mono: mono/mono/2019-06@7af64d1ebe9 Java.Interop: xamarin/java.interop/d16-3@5836f58 LibZipSharp: grendello/LibZipSharp/d16-3@71f4a94 LibZip: nih-at/libzip/rel-1-5-1@b95cf3f ProGuard: xamarin/proguard/master@905836d SQLite: xamarin/sqlite/3.27.1@8212a2d Xamarin.Android Tools: xamarin/xamarin-android-tools/d16-3@cb41333

Microsoft Mobile OpenJDK Java SDK: /Users/aardila/Library/Developer/Xamarin/jdk/microsoft_dist_openjdk_1.8.0.25 1.8.0-25 El código EPL de Android Designer está disponible EPL: https://github.com/xamarin/AndroidDesigner.EPL

Android SDK Manager Version: 1.4.0.65 Hash: c33b107 Branch: remotes/origin/d16-3 Build date: 2019-09-19 20:42:44 UTC

Android Device Manager Version: 1.2.0.115 Hash: 724ea69 Branch: remotes/origin/d16-3 Build date: 2019-09-19 20:43:06 UTC

Xamarin Inspector Version: 1.4.3 Hash: db27525 Branch: 1.4-release Build date: Mon, 09 Jul 2018 21:20:18 GMT Client compatibility: 1

Build Information Release ID: 803001805 Git revision: df50511ccb08d4d84a53939f1d7fc0b40cbb0ee1 Build date: 2019-09-20 16:10:55+00 Build branch: release-8.3 Xamarin extensions: da8d448cd65f2cc87c5e6dc7e2c2ca7b96d20c72

Operating System Mac OS X 10.14.6 Darwin 18.7.0 Darwin Kernel Version 18.7.0 Tue Aug 20 16:57:14 PDT 2019 root:xnu-4903.271.2~2/RELEASE_X86_64 x86_64

andresbj16 on Sep 25, 2019

@zachgreencbt @rulasg @andresbj16 @mtanml : does the iOS emulator have the latest version of Microsoft Authenticator?

Yes, I have the latest version of MSAL I have not verified on a physical device to see if the same thing happens as soon as I have this analysis I will share them

andresbj16 on Sep 25, 2019

Hello,

Can you please provide the full information of your xamarin.iOS installation, would be good to know if this is happening with a package that support xcode11 or with an older one.

The easiest way to get exact version information:

On Visual Studio for Mac: “Visual Studio” menu, “About Visual Studio” item, “Show Details” button.

On Visual Studio for Windows: “Help menu”, “About Microsoft Visual Studio” item.

Then copy/paste the version information (you can use the “Copy Information” button).

The Xcode version information will also be helpful since we have had several releases from Apple. (GM, GM2 or Xcode11 final).

Microsoft Visual Studio Professional 2019 Version 16.3.0 VisualStudio.16.Release/16.3.0+29318.209 Microsoft .NET Framework Version 4.8.03761

Installed Version: Professional

ADL Tools Service Provider 1.0 This package contains services used by Data Lake tools

ASP.NET and Web Tools 2019 16.3.282.33872 ASP.NET and Web Tools 2019

ASP.NET Web Frameworks and Tools 2019 16.3.282.33872 For additional information, visit https://www.asp.net/

Azure App Service Tools v3.0.0 16.3.282.33872 Azure App Service Tools v3.0.0

Azure Data Lake Node 1.0 This package contains the Data Lake integration nodes for Server Explorer.

Azure Data Lake Tools for Visual Studio 2.4.1000.0 Microsoft Azure Data Lake Tools for Visual Studio

Azure Functions and Web Jobs Tools 16.3.282.33872 Azure Functions and Web Jobs Tools