microsoftconnect/intune-app-wrapping-tool-ios

IOS App integrated with Azure AD, cannot login after Warpping.

JesseLiu1997 opened this issue · 3 comments

JesseLiu1997 commented

Our Mobile IOS App uses Azure AD for login & authentication. There is no problem with deploying the App to Intune without Warpping, but the login cannot be performed after Warpping.

The current technical situation related to App is as follows:

  1. It is developed using React Native technology, and does not use MSAL as the authentication library, but uses Oauth to directly call https://login.microsoftonline.com/${tenantId}/oauth2/v2.0/authorize to complete the authentication, and then call back the App to complete the login.
  2. The intune-app-wrapping-tool-ios version used is: 16.0.0.
  3. -aa, -ac, and -ar parameters have been applied to Wrapping：IntuneMAMPackager xxxxxxxxxxxxxx -aa https://login.microsoftonline.com/common -ac $(clientId) -ar $(callbackUrl) -v true

Any idea about the problem? It is very urgent and needs to be resolved as soon as possible.

jamgarci-MSFT commented

@JesseLiu1997 the flags -aa, -ac, and -ar is only used if you are using MSAL. If I am understanding correctly you are not using MSAL, and so these flags are not needed when you wrap the app.

JesseLiu1997 commented

@jamgarci-MSFT @darosal Thanks, the problem is solved: after delete the -aa, -ac, and -ar parameters, and evoke the browser challenge to enter the https://login.microsoftonline.com page instead of entering in the webview, please help explain this problem related technology detail?

jamgarci-MSFT commented

Hi @JesseLiu1997 as for the as the flags, these are only needed when you include and use the MSAL library in your, because as part of the steps to use the MSAL library you will need to set up App registration in the Azure AD portal which is where these values come from. It is my understanding, when you wrap the app, these flags are used in place of the default values. I hope this helps.