Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug] WAM - AcquireTokenInteractive with picker does not need to force user to enter credentials #2233

Closed
1 of 7 tasks
bgavrilMS opened this issue Nov 23, 2020 · 1 comment · Fixed by #2244
Closed
1 of 7 tasks
Assignees
Milestone

Comments

@bgavrilMS
Copy link
Member

Which Version of MSAL are you using ?
4.22

Platform
.net + uwp

What authentication flow has the issue?

  • Desktop / Mobile
    • Interactive
    • Integrated Windows Auth
    • Username Password
    • Device code flow (browserless)
  • Web App
    • Authorization code
    • OBO
  • Daemon App
    • Service to Service calls

Repro

  1. Call AcquireTokenInteractive and login with account A
  2. Call AcquireTokenInteractive with picker and again select account A

Expected behavior
Password (or FIDO or Hello) should not be collected again

Actual behavior
Creds are collected again

@neha-bhargava
Copy link
Contributor

Fixed in Msal release 4.24.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
2 participants