Search code examples
azure-active-directoryadalmdmazure-ad-msalintune

"SSO" between Intune Company Portal app and 3rd party iOS app


Is it possible to have my 3rd party iOS app use a shared token from the Intune Company Portal app to bypass authentication? I'm able to do this between two 3rd party apps by logging into one of them, and having the other one fetch token silently from iOS keychain. I'm using the MSAL framework for authenticating with Azure AD.

The apps are living on an MDM managed (Intune) iOS device running iOS 12.


Solution

  • I opened up an issue on the MSAL GitHub asking about this. It turns out it's only possible to have keychain sharing between your own apps. This is a restriction set by Apple:

    Xcode automatically prefixes keychain groups with your team ID. This ensures that your groups are specific to your development team.

    Taken from the official docs.