We are Azure AD as OIDC Identity Provider in AWS Cognito.
In iOS side, we use ASWebAuthenticationSession to show a web view and let the user login. User can login successfully but the issue is when opening Safari browser in the iPhone and going to the user’s Microsoft account, the user needs to input his/her credentials.

Notes:

• prefersEphemeralWebBrowserSession is set to false
• We’ve tried to use older APIs such as SFSafariViewController and SFAuthenticationSession
• We have our own Authorization and SSO is working between our app and Safari.

Anything we’re missing for SSO to work between our app and Safari?