CODEWITHSUNDEEP
azure-active-directoryadalmdmazure-ad-msalintune
oyvindhauge
oyvindhauge

Reputation: 3683

"SSO" between Intune Company Portal app and 3rd party iOS app

Is it possible to have my 3rd party iOS app use a shared token from the Intune Company Portal app to bypass authentication? I'm able to do this between two 3rd party apps by logging into one of them, and having the other one fetch token silently from iOS keychain. I'm using the MSAL framework for authenticating with Azure AD.

The apps are living on an MDM managed (Intune) iOS device running iOS 12.

Upvotes: 1

Views: 1248

Answers (2)

Peter Meuser
Peter Meuser

Reputation: 11

Have you looked into MS Authenticator app to be used as cross-app SSO broker? As of my understanding Company Portal app acts as broker only for Android. Also Authenticator seems to support only ADAL and not MSAL so far.

Howto enable SSO for iOS

Upvotes: 1

oyvindhauge
oyvindhauge

Reputation: 3683

I opened up an issue on the MSAL GitHub asking about this. It turns out it's only possible to have keychain sharing between your own apps. This is a restriction set by Apple:

Xcode automatically prefixes keychain groups with your team ID. This ensures that your groups are specific to your development team.

Taken from the official docs.

Upvotes: 1

Related Questions