使用Brokered身份验证的Cordova iOS应用SSO
我已经成功添加了使用Adal插件进行直接身份验证的SSO。现在，我正在尝试添加brokered身份验证，以满足Azure AD上应用的条件访问权利（设备ID注册和Intunes App Protection）。有一个支持在Adal插件中添加Brokered身份验证/文档＃Broker-Support-1“ rel =“ nofollow noreferrer”> https://openbase.com/js/cordova-plugin-plugin-ms-adal-is-is-back/documentation#broker-support-support-1 ）
问题是文档所说的要配置的，例如：X-MSAUTH-COM-MICROSOFT-MYTESTIOSAPP：//COM.MICROSOFT.MYTESTIOSAPP作为重定向URI调用Authenticator App。这确实启动了Microsoft Authenticator应用程序，但是在身份验证后，它引发了异常，称重定向URI与Azure AD应用程序中指定的URI不匹配。 在Azure，您只能将重定向URI配置为捆绑ID。例如：msauth.com.microsoft.mytestiosapp：// auth I
甚至我也尝试过MSAL插件，在这里我也能够实现直接身份验证（使用Safari）IE IE获得了响应中的成功令牌，但无法找到一种方法启动Brokered身份验证。
注意：我需要用于iOS Cordova平台ADAL或MSAL中的解决方案。
如果有人遇到了这个问题并能够解决问题，那么您的帮助将非常感谢。
I have successfully added SSO using ADAL plugin for direct authentication. Now I am trying to add Brokered authentication to satisfy the conditional access plolicies(Device ID registration and Intunes app protection ) applied on Azure AD. There is a support to add brokered authentication in the ADAL plugin but so far I am unable to get this working.(https://openbase.com/js/cordova-plugin-ms-adal-is-back/documentation#broker-support-1)
Issue is the document says to configure, ex: x-msauth-com-microsoft-mytestiosapp://com.microsoft.mytestiosapp as Redirect URI to call authenticator app. This does launch the Microsoft Authenticator App, but after the authentication it throws an exception saying Redirect Uri does not match the specified URI in the Azure AD application.
At Azure you can only configure your Redirect Uri as bundle ID. ex: msauth.com.microsoft.mytestiosapp://auth
I have even tried MSAL Plugin as well, Here also I am able to achieve direct authentication (using safari) i.e getting the success tokens in the response but unable to find a way to launch the brokered authentication.
Note : I need solution either in ADAL or MSAL for iOS Cordova platform.
If anyone has come across this problem and able to crack it, your help is greatly appreciated.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
它引发了一个例外，称重定向URI与Azure AD应用程序中的指定URI不匹配？
如果启用了启用的应用程序，无法进行身份验证？
当用户在手机上运行该应用程序时，取决于首先打开的应用程序用户，他们可能可以使用SSO功能访问该应用程序，或者他们可能会收到错误消息：
尝试更新代理应用程序（MS AuthenTicator和MS Intune ）在最新版本的手机上解决该问题。
It throws an exception saying Redirect Uri does not match the specified URI in the Azure AD application?
If brokered enabled application cannot authenticate?
When users are running the app on their phone, depending on which app users open first, they might be able to use the SSO functionality to access the app, or they might get an error message:
Try updating broker apps (MS Authenticator and MS Intune) on phones to the latest version to fix the issue.