Web login flow with MFA takes you to Salesforce Classic

[JimBTek]

Version: Salesforce Mobile SDK - ReactNative SDK 9.2.1 (latest)

Issue:

the MFA login flow is cumbersome and redirects user to Salesforce Classic embedded in app window instead of the app.

Steps to Reproduce:

• give force.com users a permission set that enforces MFA with the System Permission "Multi-Factor Authentication for User Interface Logins"
• clear oauth connections from user
• log out of app
• start a clean login
• After user/password and email verification code it forces / prompts to setup Salesforce authenticator or pick another option
• In this scenario I tested with Microsoft Authenticator by copy and paste the secret key
• it worked but forwarded me to salesforce classic within the app window
• swiping closed the app forced me to fully sign in again with user / pass / authenticator verification code
• app works as expected at this point

[brandonpage]

@JimBTek Is this consistency reproducible? A server bug that redirects the webview to Salesforce classic has existed for a very long time but it has never been fixed due to it occurring very rarely.

[JimBTek]

We just deployed MFA to 80 users and are not seeing the issue persist with salesforce authenticator. Latest react native SDK. It did happen with microsoft authenticator if that helps.

On Thu, Jan 27, 2022 at 5:52 PM Brandon Page ***@***.***> wrote: @JimBTek <https://github.com/JimBTek> Is this consistency reproducible? A server bug that redirects the webview to Salesforce classic has existed for a very long time but it has never been fixed due to it occurring very rarely. — Reply to this email directly, view it on GitHub <#265 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAI7GGZFFU6VIDP6W7BK44LUYHECXANCNFSM5L4G4TDA> . You are receiving this because you were mentioned.Message ID: ***@***.*** com>

-- Best, Jim Bartek BTek Ventures, LLC 317-292-6301 BTekVentures.com