getAccountByUsername returns null on IOS

[KennethBWSong]

Core Library

MSAL.js v2 (@azure/msal-browser)

Core Library Version

2.32.2

Wrapper Library

Not Applicable

Wrapper Library Version

None

Public or Confidential Client?

Public

Description

We have a Teams Tab app using msal-browser for SSO. When user first trigger SSO in this app, SSO works properly. If the user logout and login Teams, and we found user will be asked to login in popup login page again on Teams IOS to get user profile, while the same app on Windows can get user profile directly. When debugging, we found that the root cause should be getAccountByUsername returns null on IOS, while returns an account object on Windows.
You can find sample app here.
Related bug here.

Error Message

No response

Msal Logs

No response

MSAL Configuration

{
  auth: {
    clientId: clientId,
    authority: `https://login.microsoftonline.com/${tenantId}`,
    navigateToLoginRequestUrl: false
  },
  cache: {
    cacheLocation: "localStorage",
  },
}

Relevant Code Snippets

try {
  const account = msalInstance.getAccountByUsername(loginHint!);
  const scopesRequestForAcquireTokenSilent = {
    scopes: scopesArray,
    account: account,
    redirectUri: redirectUri,
  };
  tokenResponse = await this.msalInstance!.acquireTokenSilent(
    scopesRequestForAcquireTokenSilent
  );
} catch (error: any) {
  // error handling
}

Reproduction Steps

1. Provision and deploy SSO Tab
2. Open the app on Teams IOS, click on Authorization and login in pop-up page, you can get user profile now
3. Logout and login Teams IOS, open the app again and you need to login again in pop-up page

Expected Behavior

Should have same behavior as on Windows which can directly get user profile when login again.

Identity Provider

Azure AD / MSA

Browsers Affected (Select all that apply)

Edge

Regression

No response

Source

Internal (Microsoft)

[sameerag]

@KennethBWSong Can you please provide the MSAL logs enabling the "verbose" mode? Instructions can be found here.

[KennethBWSong]

@sameerag Do you have any idea how I can check the logs on IOS?

[sameerag]

Teams has a unique auth process on mobile. Is this flow browser in iOS -> Teams app in iOS SSO?

[KennethBWSong]

It is in an Teams Tab app on IOS. Actually, this flow works on Teams client as well as Teams Web client, and only have this issue on Teams IOS client.

[ghost]

This issue requires attention from the MSAL.js team and has not seen activity in 5 days. @sameerag please follow up.

[SLdragon]

@sameerag , any update?

[pjpraveenjayakumar]

@SLdragon , @sameerag FYI, this issue is happening with both iOS and Android mobile platforms.

Version [iOS 16.2 Android 11]

[sameerag]

@SLdragon @pjpraveenjayakumar The issue is still under investigation. We heard from a few other folks that mobile platforms have an issue with MSAL JS. We do not develop for mobile but expect the mobile browsers work as web browsers too.

As the other issue mentions, this could be something to do with webOS not allowing us to access the memory. Will keep you folks posted.

[ghost]

@KennethBWSong This issue has been automatically marked as stale because it is marked as requiring author feedback but has not had any activity for 5 days. If your issue has been resolved please let us know by closing the issue. If your issue has not been resolved please leave a comment to keep this open. It will be closed automatically in 7 days if it remains stale.

[SLdragon]

Thanks, if you have any update, please let we know.

[benjblack]

Having the same issue (#5667). This seems like a major bug / limitation on multiple mobile browsers, both iOS and Android (unless we are missing something configuration related).

[KennethBWSong]

@sameerag Please let us know in this thread if you have any update, thx!

[SLdragon]

@sameerag Any update?

[ghost]

This issue requires attention from the MSAL.js team and has not seen activity in 5 days. @sameerag please follow up.

[ghost]

This issue requires attention from the MSAL.js team and has not seen activity in 5 days. @sameerag please follow up.

[sameerag]

@SLdragon We officially do not support mobile browsers though MSAL JS is expected to work as long as they work as web browsers (in supporting popup vs redirect, browser storage etc). I would appreciate if anyone who can repro this issue can provide the network trace and verbose logs (instructions here) for me to check what may be happening.

Please also share the cache status in a working case vs non-working case.

[ghost]

@KennethBWSong This issue has been automatically marked as stale because it is marked as requiring author feedback but has not had any activity for 5 days. If your issue has been resolved please let us know by closing the issue. If your issue has not been resolved please leave a comment to keep this open. It will be closed automatically in 7 days if it remains stale.

[andresgd7]

any news?

[ThomasPe]

this is not solved!

[keeth]

This is affecting me too. It is hard to trace since it's happening inside the iOS Teams app, which doesn't provide DevTools / Remote Debugging support as far as I know.

I am able to login interactively, but nothing is stored to sessionStorage, so silent token acquisition always fails. Works fine on the Desktop Teams client and on web Teams.