I have integrated with the MSAL iOS library.
Few issues I have trouble resolving.
When I call signout as follows
[self.mMSALApplication signoutWithAccount:currentAccount signoutParameters:signoutParameters completionBlock:^(BOOL success, NSError * _Nullable error)
{
if(callback) {
dispatch_async(dispatch_get_main_queue(), ^{
callback(YES);
});
}
}];
The user is signed out fine. However when I start the interactive acquiring token process the browser pops up with the prompt “Are you trying to sign in to MyAPP?” and the continue button automatically signs them in.
Now I know I can force a login by
parameters.promptType = MSALPromptTypeLogin;
However the issue I have is that is seems like the device itself seems to know the previous account so I am thinking this isn’t really secure if the app/device will be shared by multiple users.
I have tried getting the accounts and deleting them, but that didn’t seem to make any difference.
I tried the
signoutParameters.signoutFromBrowser = YES;
But that just seems confusing that the user has to select the account to sign out from.
How to handle this in an elegant way?